nerdctl update cause pids-limit =0

[ningmingxiao]

Description

goshim will call runc update to update pidmax it will ignore PidsLimit=0
https://github.com/opencontainers/runc/blob/ef5d2d4e354d8863e5d459bfbe37ca40f97037d5/libcontainer/cgroups/fs/pids.go#L22
rust shim write cgroup directly will wirte pidmax=0

Steps to reproduce the issue

when try nerdctl -n k8s.io update --cpuset-cpus 0-2 ffe
this code

nerdctl/cmd/nerdctl/container/container_update.go

Lines 327 to 329 in c41b394

	if spec.Linux.Resources.Pids == nil {
	spec.Linux.Resources.Pids = &runtimespec.LinuxPids{}
	}

will make spec.Linux.Resources.Pids =0 it will not work on rust-shim(will cause rshim set pidlimit=0 goshim works well.).
https://github.com/containerd/rust-extensions
will cause

./nerdctl  -n k8s.io  exec  ffe  date
FATA[0000] Others("Other: OCI runtime exec failed: exec failed: unable to start container process: read init-p: connection reset by peer"): unknown

runc log 
runtime/cgo: pthread_create failed: Resource temporarily unavailable

SIGABRT: abort

PC=0x7f128ec969cf m=0 sigcode=18446744073709551610


### Describe the results you received and expected

nerdctl doesn't update pids-limit to 0

### What version of nerdctl are you using?

any

### Are you using a variant of nerdctl? (e.g., Rancher Desktop)

None

### Host information

_No response_

[ningmingxiao]

@AkihiroSuda can you review this pr ,thank you?