Goal - read-only containers - monitoring writes

[abitrolly]

We need to monitor containers to avoid writing to prevent excess resource usage. Things to look for:

1. apps writing logs
2. background services writing files

Monitoring should provide reliable signal when container fails due to attempt to write to read-only filesystem, or when its disk usage increases.

Monitoring is important to track dynamic behaviour of new versions of containers in staging before.