[Feature Request] Action based provisioning of algorithm containers

[frankcorneliusmartin]

Problem description

We could improve the security by applying the following:

• Compute action containers should not be able to reach the original data source. First Web-based file service instead of mounts #154 and [Feature Request] Chaining of algorithm containers #943 need to be implemented
• Data extraction and Pre processing should not be able to reach any thing in the network(?) Should they be able to use the whitelising / ssh-tunnel features?
• Token only needs to be requested for the compute container
• Only Compute results are returned to the vantage6-server

Maybe other rules could also be applied to different actions.

(note that this issue is referenced (#1247) to in the code, so you can search for points of interest)

[frankcorneliusmartin]

Implemented:

• Only Compute results are returned to the vantage6-server
• Token only needs to be requested for the compute container

The other two require more work