YOU CANNOT! And it has nothing to do with the RUN mode of the container!
The bigger problem is that there is no Tproxy Kernel module loaded into the RouterOS kernel and what you are trying to use depends on Tproxy (take a look at the source code here: https://github.com/v2rayA/v2rayA/blob/feat_v5/service/core/iptables/tproxy.go)
you can find more details and explanation here in this post http://forum.mikrotik.com/t/lack-of-tproxy-module-in-routeros-kernel-and-docker-containers/164452/1
The ultimate solution could come from the Mikrotik Dev team to compile and add other Iptables Modules into the RouterOS Kernel in order to allow containers taking advantage of them…