sandbox: Add basic low level BPF instructions.

This is the lowest layer of our shiny new BPF implementation, the ultimate goal
would be to write BPF implementations based on Nix lists.

Well, I originally had a more detailled description for this commit, but it got
lost in the disk crash :-/

Signed-off-by: aszlig <aszlig@redmoonstudios.org>