Add pinp support and make windmill use it

roles/windmill/tasks/main.yaml

@@ -18,25 +18,21 @@
       MODE: server
     service_additional_containers:
       - name: worker
-        image: quay.io/podman/stable:latest
-        user: podman
-        entrypoint: /entrypoint.sh
+        pinp: true
         mounts:
           - type: volume
             source: worker-logs
-            destination: /worker-logs
+            destination: /tmp/windmill/logs
           - type: volume
             source: worker-dependency-cache
-            destination: /worker-dependency-cache
-          - type: template
-            source: worker_entrypoint.sh.j2
-            destination: /entrypoint.sh
-            mode: "0755"
-          - type: volume
-            source: worker-containers
-            destination: /home/podman/.local/share/containers
-        publish_ports: []
-        env: {}
+            destination: /tmp/windmill/cache
+        env:
+          DATABASE_URL_FILE: /run/secrets/postgres-url
+          MODE: worker
+          WORKER_GROUP: default
+          ENABLE_UNSHARE_PID: "true"
+          UNSHARE_ISOLATION_FLAGS: "--user --map-root-user --pid --fork"
+
       - name: worker-native
         env:
           DATABASE_URL_FILE: /run/secrets/postgres-url