What command/process builds the included assets?

Yep, exactly. These things also tend to be cached in postgres/redis so they only need to be generated by the first app container to receive a request. The other containers can then cheaply fetch the compiled version from redis/postgres and write it to the filesystem.