- Bump landlock to 0.3
- Refactor `SafeExec` now that Landlock gem is always present (it's no
longer conditional in the Gemfile)
- Strip ENV even when landlock is unavailable (for more consistent
developer experience on macOS)
- Add problem check which alerts admins if a production instance is
running without landlock support