Feature: Allow container_s to execute local_t

**What I'd like:**
Allow a container to execute binaries labeled with `local_t`.

```
(allow container_s local_t (file (entrypoint)))
```

**Any alternatives you've considered:**
I've been manually settings binaries to `cache_t`.