Support for flat cgroups, and use more portable mountpoint

This makes Garden more portable. The host can now have either a flat cgroup mount or per-subsystem cgroup mounts. Also the intermediate mount point is named more explicitly so as to not conflict with other containerization stuff that uses "mnt" (like Docker).