Add lua sandbox data preservation

- All global data can be serialized to disk on sandbox destuction
and reloaded on init.
Redesign output for the sandbox

- Removed Output() from the Go sandbox interface as its only viable
action was to create a new message (duplicating inject_message())
- output() in the Lua sandbox API now writes data to a payload
buffer and when the payload is ready to be sent the sandbox calls
inject_message() which creates a new message and resets the payload
buffer.
- Added an output_limit sandbox constraint.  If the payload buffer
exceeds this amount the sandbox will be terminated.
- Consolidated the constraint checks in the Go API
    - removed the Memory(stat) and Instructions(stat) methods
    - added Usage(type, stat) to access all combinations
Merge branch 'dev' into features/lua-sandbox

- Fixed NewInputRunner always returning nil

Conflicts:
	pipeline/sandbox_filter.go
Merge pull request #77 from mozilla-services/features/lua-sandbox

Add lua sandbox data preservation
Merge branch 'dev' into features/safer-plugin-config