Process Container support for File Path Deny rules

### Description of the new feature / enhancement

Today, the app container (process container) containment type only supports enforcement of the Read-Only and Read-Write filesystem rules. If Deny rules are configured, they are ignored.

Filesystem deny path rules should be enforced and should override allow rules.

