Mount the application priv dir inside the container

To share files and code with the containers, bind mount the priv dir of
ampule inside the container. The bind mount is read-only.