provision/docker: avoid running deploy command twice on failures