Add locking around container spinup

Summary:
This should reduce (resolve?) race conditions around container download, definition, and launch.

Refs GH-25

Reviewers: ar

Reviewed By: ar

Differential Revision: https://tails.corp.dropbox.com/D77468