Add microapp platform scaffold

microapps/runtime/run-with-gvisor.sh

@@ -0,0 +1,17 @@
+#!/usr/bin/env sh
+set -eu
+
+IMAGE_NAME="${IMAGE_NAME:-clientflow/microapp-runtime}"
+APP_DIR="${APP_DIR:-$(pwd)/microapps/templates/pocketbase-deno-dashboard}"
+ALLOW_NET="${ALLOW_NET:-127.0.0.1,localhost}"
+
+docker run \
+  --rm \
+  --runtime=runsc \
+  --memory=256m \
+  --cpus=0.5 \
+  --pids-limit=128 \
+  -e APP_DIR=/workspace/app \
+  -e ALLOW_NET="$ALLOW_NET" \
+  -v "$APP_DIR:/workspace/app:ro" \
+  "$IMAGE_NAME"