fix(native): avoid absolute macOS library install names

Author: kmbroai

plugins/codex-security/native/build.rs

@@ -1,3 +1,7 @@
 fn main() {
     napi_build::setup();
+    if std::env::var("CARGO_CFG_TARGET_OS").as_deref() == Ok("macos") {
+        // The linker otherwise embeds its absolute output path as the install name.
+        println!("cargo:rustc-link-arg-cdylib=-Wl,-install_name,@rpath/unix.node");
+    }
 }