[container] make ensure_uniqueness protected

And require it in ContainerInterface. This will allow interface default
implementations to call ensure_uniqueness() only one in a for loop.