containerize t-web

[glyph]

This has a lot of tendrils poking into other areas of the system, particularly running the CGI scripts directly for #266 . However, mostly these tendrils can be dealt with by mounting twist web --personal home-directory sockets as volumes, and then placing them into synthetic home directories inside the container; unix sockets should work fine as a dispatch mechanism, even if they are a bit weird.