provision/docker: restart policy always for app containers. closes #889