docker one-liner should use the -i flag

[nhooyr]

Otherwise signals aren't passed correctly and the container keeps running in the bg.

Also, we need to make code-server handle signals correctly.