Minijail v15

New in this release:

• Allow more than one @include per syscall filter ([email protected]).
• Close redirected fds after dup2()-ing them ([email protected]).
• Return MINIJAIL_ERR_MOUNT instead of crashing if mount_one fails ([email protected]).