Allow for isolating the executor's filesystem from the task's

Per https://github.com/apache/mesos/blob/master/docs/container-image.md#executor-dependencies-in-a-container-image we should be able to specify an image to be mounted containing the executor's filesystem. Amongst other things, this will allow us to remove the requirement that task images contain a python 2.7 runtime.