Add --cap-add=SYS_PTRACE for debug purpose

In some situation, user job will hang and need to attach the process the debug this issue. Currently, in container, we cannot using gdb to atttach the process due to ptrace not allowed.

Consider to add --cap-add=SYS_PTRACE to allow gdb attach, Need to investigate this capability

https://stackoverflow.com/questions/19215177/how-to-solve-ptrace-operation-not-permitted-when-trying-to-attach-gdb-to-a-pro

it was a feature in #2334

Thanks, seems we should add this back