Port 'secure-containers' feature to Debian/Ubuntu

I built a [rootless docker feature](https://github.com/faangbait/dnf-features/tree/a2d8bf46a47ab36bb7142f1d76bb6554adef181b/src/secure-containers) to replace dind/dood. I didn't add Ubuntu support. You could, if you wanted to.

With LLMs writing the sort of code they're writing these days, we all need about twice as many defense-in-depth layers as we used to.