chore(CI): Fix daily CI

[lucasmcdonald3]

Issue #, if available:

Description of changes:

1. Fix GHA workflow permissions
2. Replace install_name_tool -add_rpath commands that were causing macOS header padding errors with more robust -Wl,-rpath commands

By submitting this pull request, I confirm that my contribution is made under the terms of the Apache 2.0 license.

Check any applicable:

• Were any files moved? Moving files changes their URL, which breaks all hyperlinks to the files.

[mahnushm]

I think in In GitHub Actions, paths should be a YAML list. Right now it’s a scalar string.

Change to: - .github/workflows/daily_ci.yml

[mahnushm]

better to scope permissions per job (principle of least privilege):

permissions:
contents: read

jobs:
codebuild:
permissions:
id-token: write
contents: read

[mahnushm]

Better suggestion: jobs:
codebuild:
if: github.event_name == 'pull_request' || github.repository_owner == 'aws'
permissions:
contents: read
id-token: write
uses: ./.github/workflows/codebuild.yml
secrets: inherit

[mahnushm]

permissions:
contents: read

jobs:
codebuild:
permissions:
contents: read
id-token: write
uses: ./.github/workflows/codebuild.yml
secrets: inherit

[mahnushm]

Not part of this commit the file call:

proof_ci.yaml (yaml)

other workflows are .yml