add --security-opt seccomp=unconfined to README

README section "build" add seccomp to avoid DNS locked in container