add support for new Scap self-installer
Mount the host's Docker socket so images can be pulled from the deploy
service.
Also, use a direct venv to update Scap in the env by default (so newer versions of the code can be tested without the need of a new release)
Bug: T329622