Introduce BuildConfig type
Support privileged containers
Support container-scoped run-once restart policy
Introduce Build type and controller