Update the list of the unimplemented Docker features (and implement them)

[AkihiroSuda]

The list of the unimplemented Docker features is outdated:

nerdctl/docs/command-reference.md

Lines 414 to 418 in 21590cd

	Unimplemented `docker run` flags:
	`--blkio-weight-device`, `--cpu-rt-*`, `--device-*`,
	`--disable-content-trust`, `--domainname`, `--expose`, `--health-*`, `--isolation`, `--no-healthcheck`,
	`--link*`, `--publish-all`, `--storage-opt`,
	`--userns`, `--volume-driver`

• Make RO mounts RRO by default recursive read-only (RRO) mount: support the Docker v25 form #2651
  • Docker-side PR: Support recursively read-only (RRO) mounts moby/moby#45278 volume: remove the short RRO forms in favor of the long forms moby/moby#46037
• --mount type=image feat(mount): support --mount type=image with image-subpath #4993
  • Docker-side PR: Implement mount from image moby/moby#48798
• --security-opt writable-cgroups
  • Docker-side PR: daemon/&container/: enable --security-opt writable-cgroups=true|false as an option moby/moby#48828
• buildx debugger
• CDI [Carry #2280] Add support for CDI devices to device flag #4170
• mount :z and :Z [SELinux] Private and shared host path mounts similar to docker and podman #371 feature: support selinux #4639
• userns-remap mode feat: add support for userns #3941
• (And more)

[apostasie]

"Good first issue"?

[AkihiroSuda]

"Good first issue"?

"Good first issue, only for those who have good knowledge and experiences with Docker" 😅