[CWL] Support CWL draft v1.1
- Update cwltool dependency
- Support v1.1 process requirements on Arvados
- Warn about Arvados extensions that are superseded by v1.1 process requirements
- Pass v1.1 conformance test suite
arvbox crunch-run and certificate fixes
arvbox crunch-run change to -container-enable-networking=default
Previously was "always" which causes CWL tests that checked that
networking was disabled to fail.
arvbox root-cert creates file with .crt instead of .pem, because
that's the file extension update-ca-certificates looks for.
Add cluster id and timestamp to arvbox test certificate common name to
prevents collisions on the certificate subject.
Arvbox sets trusted api_client for workbench2.
Arvados-DCO-1.1-Signed-off-by: Peter Amstutz <firstname.lastname@example.org>