Container manifests can define docker registry

- Allows for each image to be pulled from a custom docker registry
- ContainerManifest can specify authentication for a private registry
- No breaking changes
This is more DockerHub auth, but doesn't really map well to common auth in the real world (token, client cert, or Kerberos).  This struct would need to shift based on those.