You should use the Tomcat agent.
The agent must be in the running JVM since it's byte code instrumentation, so you have to add it to your Tomcat inside your Docker container.
The agent does not know if the JVM is in a container or not, all it needs is to access the Enterprise Manager.