Document known system incompatibilities: - `hidepid=1` or `hidepid=2` option on `/proc` mount are known to be incompatible with instances and setuid workflow - running apptainer inside "weak" chroot is not permitted