Confine visibility of ContainerState to ContainerRegistry
This should allow full freedom to refactor the ContainerRegistry and bring in a distributed container data store