Support filters opts

Add the filter options to the nerdctl.

- [ ] | id | Container’s ID
- [ ] | name | Container’s name
- [ ] | label | An arbitrary string representing either a key or a key-value pair. Expressed as  or =
- [ ] | exited | An integer representing the container’s exit code. Only useful with --all.
- [ ] | status | One of created, restarting, running, removing, paused, exited, or dead
- [ ] | ancestor | Filters containers which share a given image as an ancestor. Expressed as [:], , or 
- [ ] | before or since | Filters containers created before or after a given container ID or name
- [ ] | volume | Filters running containers which have mounted a given volume or bind mount.
- [ ] | network | Filters running containers connected to a given network.
- [ ] | publish or expose | Filters containers which publish or expose a given port. Expressed as [/] or /[]
- [ ] | health | Filters containers based on their healthcheck status. One of starting, healthy, unhealthy or none.
- [ ] | isolation | Windows daemon only. One of default, process, or hyperv.
- [ ] | is-task | Filters containers that are a “task” for a service. Boolean option (true or false)

The almost default behavior to add multiple `filter` args is equals to append OR conditions.