Do use CHERI Clang/LLVM rather than gcc to compile .c files in the sandbox
C runtime, or we end up with linkage that depends on $gp too early in
sandbox startup.