proposal: use os.Root / root.Open

[kolyshkin]

Since Go 1.24 we have https://pkg.go.dev/os@master#Root meaning we can use openat implicitly.

For cgroup v2, it makes sense to keep cgroup root lazy opened and use it.

Alas, it has to wait until we switch to go 1.24 as a minimally supported version.