Sane default GRAPHITE_HOST for graphite containers
Oh so many changes

• ensure sane permissions via umask
• run script only once to prepare directories; uses supervisorctl to
  start dependent services.
• consistent userid/groupid specification
• configure storage and log directories correctly
• create admin user
• rotate graphite-web logs
• configure logstash-forwarder