memory isolation

Bento turns WebAssembly memory into compartments

A new WebAssembly memory layout isolates risky data into compartments so browser apps resist Heartbleed-style bugs without visible slowdown.