Style and spelling fixes.
Ignore MALLOC_CONF in set{uid,gid,cap} binaries.

This eliminates the malloc tunables as tools for an attacker.

Closes #173
Introduce two new modes of junk filling: "alloc" and "free".

In addition to true/false, opt.junk can now be either "alloc" or "free",
giving applications the possibility of junking memory only on allocation
or deallocation.

This resolves #172.
[pprof] Produce global profile unless thread-local profile requested

Currently pprof will print output for all threads if a single thread is not
specified, but this doesn't play well with many output formats (e.g., any of
the dot-based formats).  Instead, default to printing just the overall profile
when no specific thread is requested.

This resolves #157.
Implement stats.bookkeeping.

This accounts for:
    - All base allocations, including arena headers;
    - All chunk headers;
    - Extent nodes used for huge allocations;
    - All allocations performed via a0{m,c}alloc.
    - Allocations made for tcache;
    - Allocations made for the quarantine;
    - Allocations made for heap profiling.

Note, however, that some of the allocations above are also accounted
for in several other stats such as stats.allocated or individual arena stats.