buildkitd: Enable CNI for network namespace isolation
Enable use of Container Network Interface (CNI) for isolation of network namespaces used by each build container.
Additionally, make some worker settings such as use of OCI vs.
containerd worker and GC explicit in buildkitd.toml
even though our
chart defaults to using them already.
Bug: T327416