Draft: [NO merge POC] overlayfs: basic implementation

This change extracts the filter interface and implementations into a dedicated package, establishing a clean separation of concerns. The filter package now serves as a shared utility of upcoming snapshot drivers and external consumers can use without creating unwanted dependencies. This modular approach allows each snapshot driver to apply filters consistently while keeping the filtering logic independent of any particular snapshot implementation.