port wait-to-retire from broadly/dokku

In the zero-downtime fork, we would leave the old container up for a default of 60 seconds. This prevents in-flight traffic from bombing when we flip over to the new container