launching-containers: add a section on ulimits

also change the HTTP_PROXY thing to not suggest creating a new service
file.
And depending on which goes where, double check the cloud-config section