[Bug]: `--tmpfs` option for `container {create|run}` does not split mount options.

I have done the following

• I have searched the existing issues
• If possible, I've reproduced the issue using the 'main' branch of this project

Steps to reproduce

% container run -it --rm --tmpfs /mnt/scratch:rw,exec alpine ls /mnt
scratch:rw,exec

Problem description

The --tmpfs option should split its value into one or two components (destination path and optional mount options) on the first colon.

The destination path must be a non-empty absolute path.

The mount deduplication should key on the lexically normalized destination path only, not the entire option string.

Validating mount options – not done today, we can continue to let invalid mounts fail in the container – is not in scope for the bug fix.

Environment

- OS: 26
- Xcode: 26
- Container: main

Code of Conduct

• I agree to follow this project's Code of Conduct