fix(config): fix syscall check on arm64

build(deps): update upstream seccomp library to fix ptracer

elastic/go-seccomp-bpf#40
fixes #8

refactor: normalize error message & replace path with filepath

test(pkg): add some unit tests

container: skip waitAll

vfork: fix asm on other architectures

doc: update

#13

container: add unshare cgroup before exec

#13

forkexec: use vfork if no sync needed

#13

cgroup: use rmdir to delete cgroup

runner: add procPeak as measurement of peak process count