Second half of https://gitlab.winehq.org/wine/wine/-/merge_requests/5118.
This uses a different approach, setting the process token from within the process after it is created. This avoids the need to always relay through start.exe.
-- v2: server: Create processes using a limited administrator token by default. ntdll: Elevate processes if requested in the manifest.