selftests/seccomp: cover non-cooperative pinned-memfd install

From: Cong Wang cwang@multikernel.io Add 11 tests for SECCOMP_IOCTL_NOTIF_PIN_INSTALL and SECCOMP_IOCTL_NOTIF_SEND_REDIRECT: - pinned_memfd_remote: basic install + redirect, plus the unsealed