Add Containerfile: build boco (musl) + slim kernel; runnable runner image
CI / build (pull_request) Successful in 14s
virtiofs: add --mount-mode {unshare,direct}
CI / build (pull_request) Failing after 8s