Add new /bin/cheritest test cases that set the trusted stack from a
system-class instance invoked by a sandbox: one performs a NOP
transformation, and we check for side effects from the normal return
path via the sandbox, and the other elides the sandbox frame from
the trusted stack, in which case we check that its side effects are
omitted.