feat(orchestration): add usb_passthrough option for service containers

Koushik Kumaranrequested to merge
366-usb-passthrough into main

Adds a usb_passthrough boolean to ContainerSettings and PartialContainerSettings. When enabled, bind-mounts /dev and adds cgroup device rules for ttyACM (c 166:) and ttyUSB (c 188:), allowing hot-plugged USB serial devices to be accessible inside the container without manual device enumeration.

Defaults to true for the shared service.

Co-Authored-By: Claude Sonnet 4.6 noreply@anthropic.com

Closes #366 (closed)

Edited by Koushik Kumaran

Merge request reports