arti: Add support for process hardening

This is a compile-time feature with an associated configuration flag, both enabled by default.

When it's turned on, hardening prevents the arti process from dumping core or being attached to by low-privileged processes. (This is a defense-in-depth measure, not an absolute way to prevent attacks. For more information, see secmem_proc.)

Closes #364 (closed).