Container updates story

Before deploying in containers there has to be way for security updates to be applied.

Here is a start on a list of things needed:

• Automated OCI image builds
• Automated deploy of security fixes, to the extent reasonable
• Alerting a human when needed