SERVER-12530 clean up agg output cursor creation and locking
SERVER-12530 Make DocumentSourceCursor use Runner directly

Now that the input Runner no longer is wrapped in a ClientCursor, the
PipelineRunner is responsible for propagating kill and invalidate methods.
SERVER-12586 Don't allow $out to special collections