Allow mounting a host volume as read-only

Drone Support
1

Drone currently supports mounting volumes into CI pipelines from the host machine, but there doesn’t currently appear to be a way to mount said volumes as read-only or anything similar.

Adding support for such would make it a lot safer when mounting things such as /usr/bin/ or /etc/, such as when wanting to use installed binaries or config files from the host sytem.

2

we do have support in the codebase for the :ro suffix when defining global volumes:
https://github.com/drone-runners/drone-runner-docker/blob/master/engine/compiler/compiler.go#L478:L478

however, this depends on the following pull request being merged:
https://github.com/kelseyhightower/envconfig/pull/133