WASI: add rights support

[rdunnington]

Currently the wasi_rights arg is essentially ignored for most wasi calls. To be compliant with the spec, the bytebox wasi runtime should return NOTCAPABLE when functions are called for file descriptors that don't have the particular rights. Special attention should be given to preopen rights and inheriting rights.