feat(api): Add blkio resource flags

[chrisgeo]

Summary

• Adds --blkio-weight, --blkio-weight-device, --device-read-bps, --device-write-bps, --device-read-iops, and --device-write-iops resource flags.
• Parses block I/O device specs into OCI LinuxBlockIO resources and propagates them through ContainerConfiguration into sandbox setup.
• Points the containerization dependency at the CHAOS-1380 block I/O runtime branch.

Validation

• CLANG_MODULE_CACHE_PATH=/tmp/container-clang-cache SWIFTPM_ENABLE_PLUGINS=0 swift test --filter ParserTest/testResourcesBlockIOFlags
• CLANG_MODULE_CACHE_PATH=/tmp/container-clang-cache SWIFTPM_ENABLE_PLUGINS=0 swift test --filter 'ParserTest/testResources(BlockIOFlags|RejectsInvalidBlockIOWeight)'
• CLANG_MODULE_CACHE_PATH=/tmp/container-clang-cache SWIFTPM_ENABLE_PLUGINS=0 swift build
• git diff --check

Dependencies

Depends on apple/containerization#739

[linear]

CHAOS-1380 Fork patch: --blkio-* / cgroup BFQ tuning on container run/create