Implement container runtime support in the following order:
- Incus system containers (LXD)
- Bubblewrap
- systemd-nspawn
Rationale:
- Incus now has OCI support, making it a priority
- A solution using Bubblewrap can be developed
- nspawn requires dedicated images, which adds complexity to the implementation
- This can help distrobox provide better security guarantees
Discussed with @89luca89. Self assigning