Containers boot from R2

Roughly 12 GB of baked data never reached PID 1, so the geocode runtime image is now slim and the database is streamed from R2 at boot.

• Boot telemetry shipped to R2, so a container crash is observable rather than silent