Explicitly install cli package

The docker-ce package depends on docker-ce-cli unconstrained, this
can lead to problems where the cli package is too new to communicate
with the daemon. This patch adds an explicit install task for the
cli package, so that it's version can be overridden if necessary.

Related conjurinc/ops#569

Permit to provide proxies for installation