isolators: include isolator enforcement requirements in manifest

[b]

An isolator MAY include a field named "required". If the "required" field is present and has value "true" then an executor MUST either enforce the isolator or refuse to execute the container and return an error. A missing "required" field is treated as a value of "false".

[b]

Pull request #225