Added support for Libseccomp syscall filtering

Vendored golang-seccomp bindings for libseccomp added, as is a build dependency
on libseccomp version 2.1 or higher.

Signed-off-by: Matthew Heon <mheon@redhat.com>