Minijail v15

New in this release:

• Allow more than one @include per syscall filter (zachr@google.com).
• Close redirected fds after dup2()-ing them (mnissler@google.com).
• Return MINIJAIL_ERR_MOUNT instead of crashing if mount_one fails (fdegros@chromium.org).