Sets up codejail

@jarv @carsongee @nedbat 


This sets up the edxapp codejail using apparmor, which was previously not done in the ansible configuration.  Comments appreciated.