main/bubblewrap: configure tests for local testing

Still disabled by default since unprivileged user namespaces are not available on the CI.

If somebody can get --proc with --unshare-pid to work all tests could be enabled:

~$ bwrap --bind / / --proc /proc --unshare-pid /bin/sh
bwrap: Can't mount proc on /newroot/proc: Operation not permitted