Zero-Trust Container Runtime Attestation