Implemented resource isolation and resource virtualization

After this change, you'll be able to limit how much RAM a container can allocate, how many CPU cores a container can have, and the process limit a container can reach.

That means a bad container can never kill the host! :)

Also, it spoofs CPU, RAM, Uptime, Load AVG, and other metrics to match our resource limitations.

Huge thanks to maazm7d for this patch!