Support provisioning image volumes in an isolator.

Currently the image volumes are provisioned in mesos containerizer. This makes the containerzer logic complicated, and hard to make containerizer launch to be nest aware.

We should implement a 'volume/image' isolator to move these part of logic away from the mesos containerizer.