add autoallow and entitlements support to CDI devices #6142

Job	Run time
build (windows/amd64)	3m 13s
sandbox-build (linux/amd64)	6m 53s
build (freebsd/amd64)	2m 40s
sandbox-build (linux/arm64)	7m 32s
test-freebsd-amd64	2m 44s
test-windows-amd64 (windows-2022, containerd, ./client)	9m 1s
test-windows-amd64 (windows-2022, containerd, ./cmd/buildctl)	2m 52s
test-windows-amd64 (windows-2022, containerd, ./worker/containerd)	2m 49s
test-windows-amd64 (windows-2022, containerd, ./solver)	2m 42s
test-windows-amd64 (windows-2022, containerd, ./frontend)	2m 41s
test-windows-amd64 (windows-2022, containerd, ./frontend/dockerfile)	40m 18s
test-windows-amd64 (windows-2025, containerd, ./client)	7m 46s
test-windows-amd64 (windows-2025, containerd, ./cmd/buildctl)	1m 46s
test-windows-amd64 (windows-2025, containerd, ./worker/containerd)	1m 32s
test-windows-amd64 (windows-2025, containerd, ./solver)	1m 33s
test-windows-amd64 (windows-2025, containerd, ./frontend)	1m 44s
test-windows-amd64 (windows-2025, containerd, ./frontend/dockerfile)	36m 30s
test-windows-amd64 (windows-2022, containerd, ./..., 1)	5m 7s
test-windows-amd64 (windows-2025, containerd, ./..., 1)	4m 5s
	2h 23m 28s

Provide feedback