isolate: Only apply suid bits when installing instead of when compiling.
isolate: Update from https://github.com/bblackham/moe-cms/commit/700824d3e9bce9219819e4e5096ab94da301d44b

Also change compile.sh to use the same compilation flags (hides warnings).
Fix graders within the new sandbox by adding some sanity to sandbox paths.
cmstestsuite: Add tests for managers, no output files, and more

This patch also adds a --dry-run option to see what tests would be run.
cmstestsuite: Add suid bits when testing.
Add dependencies for new sandbox to installation notes.