Add a `--netns FD` option for preexisting namespaces

The use case is for sandboxing a network service. I already have set up network namespaces to use, however bubblewrap doesn't seem to provide the option to use an already-existing namespace; it's either the hosts or a new one. As it stands one must use other container software (or unshare manually) to accomplish this.