os: document how to do application health checks

[crawford]

The user needs to provide a health-check service that is required by and runs before update-engine.service. If the health check fails, it will prevent update engine from marking the boot good. The health check service will also need to reboot the machine to allow GRUB to fallback.