Add support for device cgroup rules

### What is the problem you're trying to solve

For containers passing devices, such as SDRs, for hot plug and to not have to define each device, it is useful to pass a cgroup rule such as 'c 189:* rmw'

This is in docker compose as device_cgroup_rules
https://github.com/docker/compose/pull/9251

and podman as --device-cgroup-rule

https://github.com/containers/podman/issues/4876

### Describe the solution you'd like

Support device_cgroup_rule with nerdctl/compose

### Additional context

_No response_