Enable one PID namespace per process for NaCl processes.

This CL does two things:
 - Make the NaCl helper fork each process into a new PID namespace via
   ForkInNewPidNamespace.
 - Bring the non-NaCl process termination exit codes in line with NaCl's
   default signal handlers, that is exit with an exit code of -sig &
   0xff.

This change depends on https://codereview.chromium.org/1159803003, which
adds termination signals handlers in SFI NaCl.

BUG=460972

Review URL: https://codereview.chromium.org/1158793003

Cr-Commit-Position: refs/heads/master@{#335223}
9 files changed