add .dockerignore file

using "whitelist" strategy by default.
Remove SSH options from fig files by default.
Don't need to expose volumes in static hub. Already done in Dockerfile.
Change socketfile location to use "%(here)s"