add: generated files (volume population)

[queil]

allow things like:

# generate runs the command in an isolated one-shot container and captures output
cert:
    generate: |
      openssl genrsa -out cert.key 2048
      cat cert.key
    image: docker.io/alpine/openssl