Improve Docker build compatibility and add devcontainer
- Use pre-built opam binary instead of make cold for faster builds
- Add --network=host to docker build for firewall compatibility
- Fix cp --update=none to -n for coreutils <9.3 compatibility
- Add devcontainer config with Docker-in-Docker support
Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>