Proposal
Add --isolation as a parameter to docker service create

Background
Windows supports running containers with two different levels of isolation - process (shared kernel), and hyperv (separate kernel per container). Customers are deploying a mix of these based on their security needs. For example, trusted internal apps may be run with process level isolation to favor higher density, while others may require a separate kernel. Therefore this setting should be service-specific and not host-wide.

I mentioned this at #25209 (comment) but want to track this as a separate specific ask.