docker(role): provide option to set up gVisor (runsc runtime)

roles/docker/tasks/main/03_docker_config.yaml

@@ -2,10 +2,11 @@
 # - log to systemd journal
 #   https://docs.docker.com/engine/logging/drivers/journald/
 - name: Ensure Docker daemon configuration
-  ansible.builtin.copy:
-    src: daemon.json
+  ansible.builtin.template:
+    src: daemon.json.j2
     dest: /etc/docker/daemon.json
     owner: root
     group: root
     mode: "0644"
   become: true
+  notify: restart the docker service