simplify container running

only possible failure before was if it didn't exist anymore; which we
just logged and continued. however the caller had no way of knowing that
was the only error, so it had to do something about it.

instead, Run no longer returns an error, and just short-circuits if the
container was deleted.

also, leak fewer details if container initialization fails