lld uses too much parallelism

lld's default behavior is to use all physical cores for parallel linking. Unfortunately, docker does not provide a way to limit the number of cores reported to the guest by the kernel. This means that CI boxes can end up far over-subscribed if multiple concurrent jobs end up hitting a large linking step at the same time. This can result in other jobs being adversely affected (e.g. with test timeouts).