watchers leak inotify file descriptor when process fork/execs a child

`inotify.go` needs a tiny patch in NewWatcher.

```
  // Set IN_CLOEXEC by default. The majority of use cases should not
  // pass this descriptor down.
  fd, errno := syscall.InotifyInit1(syscall.IN_CLOEXEC)
```
