I quickly checked your notes and the tailscale docs. to run the docker container you need at least those --cap-add=net_admin and --device /dev/net/tun, neither of those can be done at the moment afaik...
I spoke with @Corey San Diego yesterday and we got this working for him (sorta). Today I fixed the issue with RELAY_LIST parsing and started updating documentation. I put it in a different branch for now and will push the fixed image shortly.
1