nordisk/heimdall

Wasm guests (wasm32), built outside the host workspace. First: verify-bundle (spec §9, milestone 1).