Option to use tools from containers instead of distro --use-tools-from-containers

Currently the external tools run in diffoscope come from used distro/os packages (debian/macox/arch, etc..) it will be useful to have option to use containers instead as option if available (--use-tools-from-containers) which:

• work across distros
• no need to wait for packaging for used distro / or for updated version (container latest will probably be more recent then version in distro)
• support limit parameters (no network --network none, memory limit, cpu limit, etc...)
• allow easy test if the problem occurs (such as failure) in upstream code as well (fix is update package, not report issue upstream)

so instead of calling apktool if the option is set, it will call something like:

containertool run docker.io/name/tool --network none -w /input/ -v /local-dir-for-exported-files/:/exportedfiles/:rw -v /local-dir-or-file-as-input/:/input/:ro

where containertool is docker or podman (depend on configuration option)