Container manifests can define docker registry

- Allows for each image to be pulled from a custom docker registry
- ContainerManifest can specify authentication for a private registry
- No breaking changes
I was thinking that there'd only be one user:password associated with the Registry object, and we'd always present that to docker.