Destroy Docker containers with stop instead of kill.

Ensure docker calls stop if a docker_stop_timeout is provided.
Added the flag docker_stop_timeout that defaults to 0, if the
timeout is 0 the a docker kill will be run, otherwise a docker stop
with the timeout in seconds is used.

Review: https://reviews.apache.org/r/26736