clarify when provisioning is done in lift

I had a hard time understanding why `lift -r` was significantly faster than `lift` - turned out it's because of the `container.ImageExists()` check (which should btw be fixed to be O(1) instead of O(n), the same way `container.Exists()` was).