Add support for --pids-limit option in CustomDockerRunOptions to allow
limiting the number of processes that can be created within a container.
This provides an additional security hardening option for deployments.
- Add --pids-limit to the mapping in convertDockerRunToCompose()
- Add parsing logic for both --pids-limit=value and --pids-limit value formats
- Add tests for the new option
This enables users to specify container runtimes like gVisor (runsc)
via the Custom Docker Run Options field.
Example usage: --runtime=runsc
This is useful for running untrusted workloads in sandboxed runtimes
that provide additional isolation beyond standard runc.
Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
