(Selectively) disable 'ngpus' resource management in the cgroup hook

Some sites would like to manage ngpus on some nodes themselves (e.g. to allow GPU oversubscription) while allowing the hook to manage GPU assignment on other nodes (when the hook manages GPUs it always assigns them to single jobs).

Here’s the design document for this extra flag for the cgroup hook. Comments welcome.