SDC-501 Add release strategy

By adding a version file to pin the commits, builds are reproducible. This allows us to make releases where we can track bugs which may be caused by upstream changes. However we still want to use the latest version of dependencies to test against.

A proposal for a strategy can be found here: https://support.astron.nl/confluence/x/EpurB

Closes SDC-501