Fix Docker Swarm rolling update deadlock

Switch from host-mode to ingress-mode port publishing to enable
zero-downtime deployments with start-first update strategy.

Host mode binds ports directly to the host, allowing only one container
per port. Combined with start-first (which requires new container to
start before stopping the old), this creates a deadlock - new container
cannot start because port is occupied.

Ingress mode uses Swarm's routing mesh, allowing multiple containers
to coexist during updates. This enables proper rolling deployments.

Also removes force-update step from deploy script as it causes
unnecessary service restarts when the stack is already running.