Closes https://github.com/apple/containerization/issues/442 This adds capabilities support to LinuxContainer via a new surface in ContainerizationOS + some C wrappers.
As a first step to making a pod type, move the nested process configuration out of LinuxContainer.Configuration.Process and into a standalone LinuxProcessConfiguration type.