Provision docker-002

Summary:
Provision an new node on hyper-001 with the role paas-docker.

Docker storage uses overlay2, as devicemapper is now deprecated.

Migrate every service from docker-001 to docker-002. Services uses
Drake network on 172.27.27.5 when they should be restricted.

Credentials fully use Vault, so Zemke-Rhyne isn't used here.
Pillar also adopts notifications.config for Notifications Center
configuration instead of legacy rOPSDATAN.

To simplify the migration, we take back the IPFO 51.255.124.9 address
from docker-001, and the IPv6 HE tunnel from Equatower.

Ref T1779

Test Plan:
ssh docker-002.nasqueron.org
docker ps

Reviewers: dereckson

Maniphest Tasks: T1779

Differential Revision: https://devcentral.nasqueron.org/D2787