Put a dedicated socket proxy between Sablier and /var/run/docker.sock, so Sablier reaches only the Docker API endpoints it actually needs.

…