support webagg port in run
support webagg port in run

requires separate create/attach/rm rather than nicer `run --rm` in order to get the MPL port logged

alternative: use `run --rm` and fixed port. That would require only one run container at a time,
which is probably okay.

FEniCS/docker