Isolate Sierra to CASM compiler to a subprocess

[kkovaacs]

In order to be able to limit CPU / memory resources (and implement a timeout) we should isolate the compiler into a subprocess and set resource limits to reasonable (configurable) values.