Checks docker info succeeds, so a caller can fail early and clearly
(before materialising anything) rather than partway through a batch of
papers with a cryptic docker run error. Used as the guard for
sandbox = "docker" the same way requireNamespace("callr", ...) guards
the process backend.
