Add Cgroup resource limits into Yaml spec

This adds all the cgroup restrictions into the spec.

Signed-off-by: Justin Cormack <justin.cormack@docker.com>

test/test.yml

@@ -30,6 +30,12 @@ services:
      - CAP_SETGID
      - CAP_DAC_OVERRIDE
     net: host
+    resources:
+      devices:
+        - allow: true
+          access: rwm
+      pids:
+        limit: 10
 files:
   - path: etc/docker/daemon.json
     contents: '{"debug": true}'