GitLab

the right hand side overwrites and we want to enforce certain things otherwise they don't make sense

let's enforce part of the important config for the container, while letting upwards user still define some other aspects - + set containers to read-only by default

migrate the explicit container call to the dispatching to podman::container via common - so all webhosting containers get initiated the same way