thumbnail: Restrict thumbnailer syscalls using seccomp

Use seccomp code from flatpak to limit the system calls thumbnailers can
make, reducing the attach surface.

https://bugzilla.gnome.org/show_bug.cgi?id=785197