Add lib/csu/cheri files not added in prior commit: common implementation
of the sandbox-entry code for helper binaries.
Tidy up helper-binary makefiles.