[opt] Use a Docker volume for coqlib files.

A bind-mount is too slow.
`sudo` is required to copy onto the volume.
The implementation is currently non-reentrant, so `-j1` is needed.