Add support for device cgroup rules

[iakat]

What is the problem you're trying to solve

For containers passing devices, such as SDRs, for hot plug and to not have to define each device, it is useful to pass a cgroup rule such as 'c 189:* rmw'

This is in docker compose as device_cgroup_rules
docker/compose#9251

and podman as --device-cgroup-rule

containers/podman#4876

Describe the solution you'd like

Support device_cgroup_rule with nerdctl/compose

Additional context

No response