add --apply-template option to ensure desired dock items

intended to use e.g. on lab PCs as a login-LaunchAgent.
(un)desired dock items can be specified in a JSON 'template' file.
optionally only affects users explicitly named in template.
currently invokes dockutil itself (only) when changes are necessary;
this might not be ideal, but delivers expected functionality for now/me.