tools: add docker-run script for SDK container execution

The script executes build scripts within the Bottlerocket SDK container
by reading configuration from Twoliter.lock and optional overrides from
Twoliter.override. It mounts the current directory and preserves user
permissions to ensure proper file ownership of generated artifacts.

Signed-off-by: Jingwei Wang <jweiw@amazon.com>

Author: sky1122

tools/docker-run.sh

@@ -0,0 +1,29 @@
+#!/usr/bin/env bash
+set -e -o pipefail
+
+
+bail() {
+    if [[ $# -gt 0 ]]; then
+        >&2 echo "Error: $*"
+    fi
+    exit 1
+}
+
+SCRIPT_PATH="$1"
+
+source="$(tq -r ".sdk.source" -f Twoliter.lock)"
+version="$(tq -r ".sdk.version" -f Twoliter.lock)"
+_name="$(tq -r ".sdk.name" -f Twoliter.lock)"
+_registry="${source%/*}"
+
+registry="$(tq -r ".bottlerocket.bottlerocket-sdk.registry" -f Twoliter.override 2>/dev/null || echo "$_registry")"
+name="$(tq -r ".bottlerocket.bottlerocket-sdk.name" -f Twoliter.override 2>/dev/null || echo "$_name")"
+
+SDK="${registry}/${name}:v${version}"
+
+docker run --rm \
+    -v "$(pwd):/bottlerocket-kernel-kit" \
+    --user "$(id -u):$(id -g)" \
+    "${SDK}" \
+    bash "${SCRIPT_PATH}"
+