Production hardening: warn about haveged

[mtigas]

• update Docker to remove haveged from server deploys (OR to remove it after gpginit is done
• document that having system entropy is only necessary for gpginit key generation step (and that virtual machines and weak/small dev environments or servers are the only cases where you'd even need it in the first place)