Make obfs4 Docker image support private bridges

For #28526 (moved) it would be helpful if one could configure an obfs4 Docker container to be private. We could simply add a new environment variable, say PRIVATE_BRIDGE, which controls whether the container sets BridgeDistribution none in its torrc or not.