Rakefile: more formal install.

* Install to sbin instead of bin.
* 'lrun' gid is 593 by default.
README: add libseccomp version requirement.