feat: remove open port & enable docker live-restore

[ticoombs]

Here we give a QOL update to lemmy-ansible.

• move to using a dedicated container by default for schedule, federate, and api
• close the open port that everyone seems to forgot about
• enable the live-restore so everyone can update docker without fear of their lemmy server going down
• cleanup a vim issue

[Nothing4You]

It might make sense to put live restore behind a var that is disabled by default and instruct people to read and understand https://docs.docker.com/config/containers/live-restore/ first if they want to use it, otherwise it might be an easy trap for people with less docker experience.

Live restore allows you to keep containers running across Docker daemon updates, but is only supported when installing patch releases (YY.MM.x), not for major (YY.MM) daemon upgrades.

If you skip releases during an upgrade, the daemon may not restore its connection to the containers. If the daemon can't restore the connection, it can't manage the running containers and you must stop them manually.