User Namespace Security Hardening

Implement secure UID/GID mapping to isolate the container from the host root.