Push-to-{deploy,update} LXC containers with Git-managed state