Add a tiny dynamically-linked wrapper for static binaries.

The Pascal compiler and the binaries it generates are linked statically,
so the LD_PRELOAD trick to ensure the process sandboxes itself does not
work. I should probably also add a check in libminijail and refuse to
execute binaries that do not use ld-linux.so.2.