add `restart: unless-stopped` for watchtower

Useful for rebooting the machine. It doesn't really make sense (at least to me) that proxy is set to restart, but watchtower is not.