binfmt_misc registrations should enforce `F` flag

[staticfloat]

Without the fix binary flag, most of Sandbox's multiarch images won't work, as we generally don't bundle qemu inside of the rootfs. When Sandbox is checking for binfmt_misc registration, it should allow a force parameter that removes a pre-existing registration and replaces it with the one we know will work.