fix(coreos_startup): need exec,dev,suid on stateful

unlike chromeos we need exec,dev,suid on our stateful partition for the
containers. Enable these options.
feat(coreos_startup): mount lib/docker

put lib/docker into the list of var directories to mount over to the
stateful partition
fix(coreos-startup): order before docker

Before=docker.service