This installs the official docker.io/cloudflare/mesh:latest image as a
rootful Podman Quadlet. The container needs the privileges and host device
required by Cloudflare Mesh: NET_ADMIN, NET_RAW, /dev/net/tun, and IP
forwarding sysctls.
Bridge mode is the default: