Package reap installs a SIGCHLD-driven loop that wait()s children
reparented to this process (PID 1 in the sandbox), and is the single
authoritative waiter for every child on Linux so no other caller races it
with its own wait4/cmd.Wait.
AwaitExit blocks until the reaper has reaped pid, returning (code, true).
Only meaningful after Start(); if the reaper is not running it returns (0,false).
Start installs the SIGCHLD reaper. Safe to call once. After Start, AwaitExit
returns the reaped exit code for a given child pid (blocking until reaped).