Garden supports disabling privileged containers, and some users have configured it (see Discord message) - should we support that for the containerd runtime too?

As a user of kind-on-c
I want to understand how the thing is tested and how changes are promoted
So that I understand how to consume it and can assess if I can trust it

There are some docs in [ci/README.md][ciR] about how changes make it in, are tested, and promoted. This is however outdated (still talks about alpine & tags).
Also, the [Dockerfile][d] still has some reference to al