[WM] set Docker image tag to "branch-commit"
[WM] first cut at actually deploying the OpenVPN container

This obviously doesn't make any attempt to stop an old container. That
will need some thought since the ports are pinned and directly connected
to. Might be a good place for an ambassador container.