handle --net=container:<image> dependencies

It wasn't obvious to me to know how to do that, but I will check at how docker does it and replicate the logic. So I guess we agree the `container:id` syntax should be forbidden within crane, because it's not portable and doesn't map well with ordering & dependencies, right? If so, I will also update the README within this PR.