isolate: code drop from upstream moe.git

Imported d331139bdbc6b2a7a1a1f318970734888324730b
isolate: update moe code drop.

github.com/bblackham/moe-cms.git 8d83ff6bb1692b23c802b8fbb395f05244e8f819
Add infrastructure to compile isolate.
Convert to use isolate instead of mo-box.
Remove mo-box from source tree.
Initialize sandbox automatically on worker startup.
Don't error when timer or mem usage unknown.
Cleanup sandbox used for initialization.
Swap search order for isolate sandbox.

Because the directory has the same name as the executable, we don't want to
pick that up first by accident.
cmstestsuite: Fix results for timeout tests.

Now we are using the new sandbox, we can't actually detect forbidden system
calls. They really are just timeouts.
Add some debian packaging.
upstart: Fix starting conditions

postgresql is not controlled by upstart yet, so the original condition is
never triggered.
debian: Add cgroup-bin as dependency

Something has to mount /sys/fs/cgroup/. We could do it manually, but that seems
improper. Depending on cgroup-bin may be overkill, but it seems like any
craziness required to mount /sys/fs/cgroup/ in various circumstances would be
already handled by it, now and in the future.
debian: Add dependency on iso-codes package.
task versioning: update DB schema.
task versioning: add AdminWebServer support for managing datasets.
AWS: Fix updating testcases.
Ensure dataset description is unique.
AWS: Bugfix in format string for redirect.
Fix unique constraint for dataset descriptions.