(Docker 3/5) Refuse to resume expired or foreign docker-autoscaler environments

What does this MR do?

On resume, the runner checks that the build and service containers belong to the environment and that it is not older than the TTL. Otherwise the job fails with runtime_environment_unavailable.

Why was this MR needed?

An expired or foreign environment must not be resumed.

What's the best way to test this MR?

go test -race ./executors/docker/ -run 'Resume'

What are the relevant issue numbers?

Related to #39468. Depends on gitlab!262332 (merged).