Forbid fork, except very carefully before exec

Fixes #1897 (closed).

I investigated arti-rpc-client-core but it is written in sync Rust and doesn't spawn any threads. So I think it is safe under fork, assuming none of the libraries it uses make threads. In theory we could maybe somehow have a CI test for that but it seems hard.