Add support for forbidden docker args configuration using the `agent.forbidden_docker_args` setting (defaults to "entrypoint") to prevent user configuratino from interfering with task startup process inside containers