Prepare Docker image for publish and support code upgrades

To support Docker as a deployment platform:
- we need to ensure the image can be built and could leverage code upgrades without losing releases after restart of the image.
- we also need to see how to communicate with hardware materials such as TPM / USB keys (HSM)

No files, tests, or entry points are named. Start by defining the Docker image build and upgrade requirements, including release persistence across restarts and communication with TPM or USB HSM hardware; done requires an agreed implementation scope for all three areas.

Written by the indexing model from the issue text.