golangci-lint: enable depguard to prevent re-introducing libcontainer

[thaJeztah]

• depends on remove uses of github.com/runc/libcontainer/cgroups #9045
• depends on / relates to remove github.com/opencontainers/runc dependency #9114
• relates to move most packages into internal opencontainers/runc#3028

[k8s-ci-robot]

Skipping CI for Draft Pull Request.
If you want CI signal for your change, please convert it to an actual PR.
You can still manually trigger a test run with /test all

[thaJeztah]

This may fail, because the depguard config format changed, so perhaps we need to update golangci-lint first

[dmcgowan]

@thaJeztah will we only see the fail after merging? Does it work locally just on another version?

This change looks good though once we figure that out

[thaJeztah]

So, I don't think this works currently (unfortunately); the old version just ignores the config, and the new version's config syntax isn't easy to work with for this case (unless I overlooked an option); see

• make it easier to deny "some" packages from a dependency OpenPeeDeeP/depguard#63

[thaJeztah]

Now that we fully dropped runc as dependency in #9114, this one became easier to configure.

Updated it to guard against github.com/opencontainers/runc as dependency; this should be ready for review now 👍