Cage the Resource Hog

Set memory, CPU and PID limits so one container can't kill the node.

A intermediate Docker challenge worth 10 points. Solve it hands-on in a real Docker environment in your browser - no local setup, no fake shells.