Implement stream isolation

Tor has a pretty complicated but useful set of rules to prevent applications from interfering with one another; Arti needs these too.

We should also have good APIs that applications can use to ensure that their streams get isolated in the way they want.