improve docker security (#1375)
improve docker security (#1375)

motivation: more secured ci setup

changes:
* enable :z selinux flag on bind mounts so we can enable selinux on ci
* drop potentially exploitable capabilities from docker-compose
apple/swift-nio,apple/swift-nio,apple/swift-nio,apple/swift-nio,apple/swift-nio