supervisor: Tighten up the seccomp blacklist
supervisor: Add --seccomp-dump-pfc

This is useful for debugging the filter.
supervisor: Change seccomp bad arch action from KILL to ENOSYS

Killing the process is gratuitous, especially for x32 syscalls.
supervisor: Tighten up ptrace restrictions in devmode
Add 'Coming Soon' apps.
Add crowdfunding notice to top bar.
Merge pull request #44 from amluto/master

Tighten up the seccomp sandbox
Merge branch 'master' of github.com:sandstorm-io/sandstorm
Indicate devmode apps visually in the picker, and only show devmode actions when in devmode.
Add source links even to 'coming soon' apps.
Keep the mailing list link on /demo after the user has logged in as a demo user.
Add crowdfunding links to front page.
Merge branch 'master' into crowdfunding
Tweak color of in-shell crowdfunding notice.
Make top-left button into a proper link.
supervisor: Block network protocols above AF_NETLINK

libseccomp appears to actively fight back against more specific rules.
supervisor: Finish locking down allowed socket families
Merge pull request #45 from amluto/master

Lock down socket(2)
Make sure debug logs are HTML-escaped. Kind of strange that ansi_up doesn't do this by default.
Correct Vagrant box URL

Now points to the continuously updated version.