Disallow no-lock and file-input options in cf-agent when called via cfruncommand

This hardens the already existing limitation, which is enforced in
cf-runagent and cf-serverd, but has holes. Ie. --no-loc is accepted by
cf-runagent and cf-serverd, and interpreted by cf-agent as --no-lock
as is standard for unix command line tools.
I notice another problem: `-Dcfruncommand -Dsomethingelse` shall clear cfruncommand on the second -D.
You need to say: `if (StringSetContains(defined_classes, "cfruncommand")) { cfruncommand = true; }`