Initial support for running the test harness in a Docker container

Using the "contained_harness" ksmeta variable, one can run the tests in
a Docker container instead of the real test system.

Bug: 1131388
Change-Id: Ib1bd525e07b32c2c788ef68021cfb5576d0dcf63