Add separate docker-compose.yaml for Let's Encrypt initial cert generation

[argoroots]

So certs can be generated before other containers start. Certbot renew should be inside general config