Protect active container directories during scheduled file cleanup

[zhongwen666]

FileCleanupTask can delete files or empty directories belonging to running containers when retention thresholds are met. Query running Docker containers before cleanup, exclude each target path container subtree, and fail closed when container discovery is unavailable or untrusted.