Set heap size limits respecting cgroup constraints

[kinghuang]

See https://developers.redhat.com/blog/2017/03/14/java-inside-docker/.

[kinghuang]

See also https://www.reddit.com/r/docker/comments/5ze33g/java_inside_docker_what_you_must_know_to_not_fail/.