Add role sbuild_unshare

Used in Kali infra, along with the rebuildd role.

It's not exactly a drop-in replacement for the existing sbuild role, but close enough, and migration is very straighforward. Check the README.md for details.

CC @hertzog since we talked about this MR already