`sc2`: support guest/host image pulling with `nydus`

[csegarragonz]

Steps:

• Lazy guest pull (sc2(nydus): enable lazy pulling in the guest #121)
• Host pull + dm-verity (nydus: support host-sharing #131)
• Support simultaneous guest pull (app) and host mount (sidecar)
• Hybrid app image