add systemd service template

* rename app container from "user-run" to just "user"
* use systemd to start containers at boot-time