Support disk image based pod volumes (apple#780)

The `PodVolume` type in `LinuxPod` only defined the `nbd` enum value -
however, disk based images are also supported and the pattern is
essentially the same

Signed-off-by: Aditya Ramani <a_ramani@apple.com>

[Experimental] Add Sandboxy binary (apple#607)

Sandboxy is an example tool to run isolated coding agents.

Add totalAllocatedSize to ContentStore (apple#760)

This PR adds `totalAllocatedSize()` to the `ContentStore` protocol so it
can be used to get the on-disk footprint without reaching past the
abstraction. `LocalContentStore` implements it by walking its base path,
covering both committed blobs and active ingest sessions.

0.33.2, adds FilePathOps

Add path resolution for CopyIn using Stat (apple#727)

This pull request enhances the handling of file and directory copy
operations in Linux containers, particularly by improving destination
path resolution and error handling for the `copyIn` operation with the
`Stat RPC`

This PR is needed for
[container#1190](apple/container#1190)

Make maxIDLength public (apple#734)

Add unit tests for AsyncLock (apple#720)

These tests were requested as part of a test change in
apple/container#1497. These tests mimic a lot of
the tests in
https://github.com/apple/containerization/blob/main/Tests/ContainerizationExtrasTests/AsyncMutexTests.swift
where possible/appropriate.

Signed-off-by: Kathryn Baldauf <k_baldauf@apple.com>