Recommend security.nesting=true in debusine incus profile

Some autopkgtests use namespaces. It's probably reasonable to allow this, by adding security.nesting=true to the debusine profile in Incus.

We should:

• Document this
• Update our setup script
• Update the debusine.debian.net and debusine.freexian.com workers.