luacat: restrict standard library

[zombiezen]

While catalog code should be trusted, a desirable feature is for luacat evaluation to be mostly side-effect free. It would be good to scrub through the standard library and either remove or sanitize functions. I've already removed the io package, but I will update this issue with the list of changes after some research.