Stub Kernel.system and Kernel.`

Use RSpec examples metadata feature to not stub these methods when the
:no_system_stub metadata is present.
Introduce Guard::Sheller to replace system/` calls.
complete Sheller + add stderr
stub all remaining system() calls with Sheller