Docker: handle port ranges and host-network containers

[breakzplatform]

A container can publish a range, bind to a specific host IP, or use host networking (where its ports already show up in the host source). Deduplicate against the host source so a container port is not published twice.