Windows App Container

[mwasplund]

To provide a higher level of security when executing arbitrary code that was compiled during the build evaluation and execution phase we should instrument the Tasks and Operation invocations to run under a Windows App container to prevent access to OS functionality. This can then be relaxed by allowing build tasks to request special permissions.