Restrict bubblewrap /proc and /dev exposure#35

mrjf with Copilot wants to merge 10 commits into

mainmrjf/bands:mainfrom

copilot/fix-bubblewrap-proc-dev-mountsmrjf/bands:copilot/fix-bubblewrap-proc-dev-mountsCopy head branch name to clipboard