CPU core limit (--cpus, default: 2).
Docker image reference (default: 'mj-video-render-worker:local').
Container memory limit in megabytes (--memory <n>m, default: 4096).
Container PID ceiling (--pids-limit, default: 512).
Container /dev/shm size in megabytes (--shm-size <n>m, default: 1024).
OptionalWorkspaceOptional host workspace root directory bind-mounted into per-job containers.
When omitted, DockerRenderDriver creates and reuses one per-process 0o700 directory
via fs.mkdtemp(path.join(os.tmpdir(), 'mj-video-render-')).
Hardened Docker container settings used by
DockerRenderDriver(VS-RND-4).