Add a new 'just spin and don't return' sandboxed test case to the
cheritest command-line tool.  We will use this for testing sandbox
timeout and recoverh functionality.

In doing this, improve cheritest-helper structure a bit: add an
explicit operation argument to the sandbox invoke method, and define
three for abort, md5, and spin.