core: drain seccomp notifications via AsyncFd, remove per-sandbox blocking thread#50

congwang-mk merged 2 commits into

mainmultikernel/sandlock:mainfrom

notif-async-recvmultikernel/sandlock:notif-async-recvCopy head branch name to clipboard