run rakudo-moar in a restricted firejail

[stigtsp]

An attempt to make evalbot run rakudo-moar in an very restricted environment.

• No network access
• Ephemeral private /tmp, /var, /etc, /home, etc mounts
• Resource limits like cpu time
• Drops all linux capabilities

Work in progress, only supports p6 at this time. Runs as c4meli4 on freenode/#oslohackerspace: