Pre-generated Seccomp BPF Filters

The old approach of shipping pre-generated BPF filter files (unix-block.bpf) for seccomp sandboxing has been replaced with a multicall binary approach using /proc/self/exe and ARGV0 dispatch. The vendor/seccomp/ directory and architecture-specific filter lookup code have been removed.