Switch to supervisord

* run celery using native package
* run celery as "celery" user (may require some permission tuning under
  /app)
* get rid of not needed packages
* do not clone the repo into the docker image runtime (less network
  deps)