docker: fix startup scripts for nsd and dovecot to run them in the foreground
system.sh: make apt-get upgrade quieter
docker: don't start services ourself

* let the base image's system services manager handle it
* move our container start script to occur before system services are started