Rewrite Docker wrapper in a language that isn't Bash.

In order to properly support Docker and Docker Compose inside the sandbox environments, we had to create some fairly hideous wrapper scripts that resolve symlinks in volume paths. This level of complexity does not belong in bash and would be better written as a Go wrapper or a patch to the Docker CLI. 