Support static linking for libtock-rs

Adds a --protected-region-size flag so that the actual application code will be in a known fixed location in the full application binary (with the TBF header).