Remap UIDs in base container image

This commit makes user namespaces completely transparent to the user.

Local images are stored with UID 0 mapped to docker-root user.  Containers
always run with container root mapped to docker-root user on host.
With base image already remapped on register, there is no need to
translate UIDs on container start.  Image is reverse translated on push.