[docs][syscalls] Add TODOs about documenting system call rights

ZX-2399 #comment

Test: no functional change
Change-Id: I1f285c677e2444fcf1d720d7ecbd9f490c303962

[docs][syscalls] Clarify ZX_ERR_NO_MEMORY as eventually going away

Not touched:
vmo_op_range.md
vmo_set_size.md
vmo_write.md
The current text is ok for these.

ZX-2303 #comment patch

Tested: Just doc changes, read before/after.

Change-Id: I2c6e1039e2b205e9cc377b9888755fa7ac676c78

[job] Revert "[job][right] Only use ZX_RIGHT_MANAGE_JOB for creating jobs"

This reverts commit 14012b9c9c39c1cccc61193ebd0472fdb2a59862.

Change-Id: If076d0ab32c3898250ab315d634c5d085d4f8e7c

[job][right] Only use ZX_RIGHT_MANAGE_JOB for creating jobs

Change-Id: Ie6674a11f3a2323de03c5d76790a5204a6371e54

[jobs] Also check the MANAGE_JOB right for allowing job creation

Change-Id: I1933f93c8e1e7a9319e19768c5640334ff688d70

[zircon] Make jobs enter dead state

This removes the temporary state getting "bad state" and aligns
behavior with the other task objects: thread and process

ZX-471 #done

Change-Id: I326b8bd8853f7bdaeaa2626ba6f4745871a9272b

[zx] Magenta -> Zircon

The Great Renaming is here!

Change-Id: I3229bdeb2a3d0e40fb4db6fec8ca7d971fbffb94

[syscalls] Remove MX_PROP_JOB_MAX_HEIGHT

Since it's not settable, we should keep it hidden until there's a strong
reason to expose it.

Change-Id: I387f097aa50a56aa1b29258e6902f88b8e18a9e8

[docs][errors] Rename all the errors in docs/ to MX_OK and MX_ERR_*

Change-Id: I62451456a83145760c6454a619d4c699ce8e9017

[syscalls] Add a "max height" to job objects

Caps the depth of the job tree, avoiding kernel stack
overflows when recursing through it.

Start with a depth of 32, which should be more than enough.
We can always turn it into a kernel flag later if necessary.

MG-764 #done

Change-Id: I58e50527e10b8fe6a9c35bf21a53fe50e47a553c

[syscalls] Uniformally use "options" rather than "flags" as a syscall parameter name

With the exception of the VMAR syscalls which really do want to talk
about map_flags.

Part of MG-559

Change-Id: I51673de824b4072990f01724a3bf522a9a84f4f4

[docs][syscalls] Fix all the manpages

Change-Id: Ie9ba25060f3331de8d9c178caf6332fb48fc80f5

[kernel][magenta] Add signals to Job objects, reform code

There are now two signals:

- MX_JOB_NO_PROCESSES
- MX_JOB_NO_JOBS

You can wait on them.

So now you can wait until all processes or all jobs are dead.

Along the way we also add a lifetime state to the job object, this
way we can issue mx_task_kill(job) and be sure that if it completes
there are no new processes or jobs that raced their way in.

This results in a new error condition if a process or job is
created when the killing operation is in progress.

In addition, reform the way kill happens by only taking the lock
once, swaping the lists and killing each child.

Change-Id: Id72392ec9282aec51e8401acccb501fa742ca138

[docs] Add some basic job documents

And link the process ones to the job ones.

Change-Id: I89417552478f6076735145e21470e2b25e6b3565

[docs] Add stubs for all remaining syscalls

This doesn't include debug or DDK syscalls, or syscalls that will go
away in the Grand Resourcening.

Change-Id: Ic25211908d66189c26d0694a8fd0884a6d05069c