Bake entitlements for filesystem should be allowed automatically in action

[tonistiigi]

In docker/buildx#2796 by default the filesystem access is only allowed within the working directory. I think in CI context this restriction isn't probably important and the default could be to allow fs access everywhere.

@crazy-max lmk if you prefer any more buildx changes to support this.

[crazy-max]

I think in CI context this restriction isn't probably important and the default could be to allow fs access everywhere.

Yes this makes sense as runners are sandboxed on their own.