feat: add support to add and drop linux capabilities #3017

Job	Run time
Build melange and add to artifact cache	1m 30s
Build packages (bubblewrap, hello-wolfi)	1m 27s
Build packages (bubblewrap, glibc)	13m 51s
Build packages (bubblewrap, tini)	1m 36s
Build packages (bubblewrap, lzo)	1m 39s
Build packages (bubblewrap, bubblewrap)	1m 17s
Build packages (bubblewrap, gitsign)	2m 49s
Build packages (bubblewrap, guac)	4m 6s
Build packages (bubblewrap, mdbook)	3m 53s
Build packages (bubblewrap, s3cmd)	1m 14s
Build packages (bubblewrap, perl-yaml-syck)	1m 16s
Build packages (bubblewrap, ncurses)	2m 19s
Build packages (qemu, hello-wolfi)	2m 1s
Build packages (qemu, glibc)	14m 3s
Build packages (qemu, tini)	1m 58s
Build packages (qemu, lzo)	1m 56s
Build packages (qemu, bubblewrap)	2m 6s
Build packages (qemu, gitsign)	3m 47s
Build packages (qemu, guac)	4m 58s
Build packages (qemu, mdbook)	4m 31s
Build packages (qemu, s3cmd)	1m 55s
Build packages (qemu, perl-yaml-syck)	1m 53s
Build packages (qemu, ncurses)	2m 42s
	1h 18m 47s

Provide feedback