ya‐runtime‐vm changes

Changes in ya-runtime-vm necessary for GPU use case

Sandboxing within the VM: https://github.com/golemfactory/ya-runtime-vm/pull/176
Update qemu to recent version (8.1.0?), and update its cmdline (some currently used options were deprecated)
- Currently Live USB image is using qemu from system (ubuntu 22.04)
Support multiple --pci-device options
~~(to be confirmed) Add second -initrd option with modules.cpio.gz if exists~~
Load /nvidia.ko when relevant, and connect nvidia files (squashfs) as vdb to the VM