container: T5134: support binding container network to specific VRF

Container networks now can be bound to a specific VRF instance.

set vrf name <foo> table <xxx>
set container network <name> vrf <foo>