feat: Add CRI-O compatibility for containerd-shim-runsc-v1

[xw19]

This update addresses two critical issues preventing containerd-shim-runsc-v1 from functioning with CRI-O when runtime_type=vm is configured. First, it resolves a shim grouping failure by adding support for CRI-O’s sandbox annotation (io.kubernetes.cri-o.SandboxID), ensuring sub-containers correctly identify their parent sandbox instead of spawning independent, non-functional shims. Second, it fixes a stability issue where the shim would panic due to missing containerd event addresses; these fatal panics have been replaced with non-fatal warning logs. Finally, to ensure successful deployment, a new quick-start guide has been added to g3doc/user_guide/containerd/ detailing the required configuration to complement the companion fix in cri-o/cri-o#9974

Fixes: #10313

[google-cla]

Thanks for your pull request! It looks like this may be your first contribution to a Google open source project. Before we can look at your pull request, you'll need to sign a Contributor License Agreement (CLA).

View this failed invocation of the CLA check for more information.

For the most up to date status, view the checks section at the bottom of the pull request.