Compile cheritest-helper, the sandboxed portion of cheritest, with CHERI
LLVM and __capability use.  Use of __capability is not propagated down
into libmd, however, but at least copying of bytes out of the buffer is
done in a compiler-visible way rather than using inline assembly.