Explicitly build minimal docker images that installs and runs python package.
Upgrade gitlab ci to work on instantiated version of the template rather then including {{cookiecutter...}/.gitlab-ci.yml directly as that can contain template arguments.
Override all template jobs on the trigger include to depend on the instantiated pipeline.
Profit