restructured container for security, readability; re-wrote documentation
initial commit with unvendored files