Provision an new node on hyper-001 with the role paas-docker.
Docker storage uses overlay2, as devicemapper is now deprecated.
Migrate every service from docker-001 to docker-002. Services uses
Drake network on 172.27.27.5 when they should be restricted.
Credentials fully use Vault, so Zemke-Rhyne isn't used here.
Pillar also adopts notifications.config for Notifications Center
configuration instead of legacy rOPSDATAN.
To simplify the migration, we take back the IPFO 51.255.124.9 address
from docker-001, and the IPv6 HE tunnel from Equatower.
Ref T1779