Allow execution of VM code on macOS

The Q3 VM compiles native code that is unsigned, which since Tahoe (possibly
earlier) requires an entitlement to be set in order to execute it.

Author: timangus

cmake/entitlements.plist

@@ -0,0 +1,9 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN"
+  "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
+<plist version="1.0">
+<dict>
+    <key>com.apple.security.cs.allow-unsigned-executable-memory</key>
+    <true/>
+</dict>
+</plist>

cmake/platforms/macos.cmake

@@ -95,6 +95,7 @@ if(NOT "$ENV{APPLE_CERTIFICATE_ID}" STREQUAL "")
 
             add_custom_command(TARGET ${TARGET} POST_BUILD
                 COMMAND codesign --force --deep --options runtime
+                    --entitlements ${CMAKE_SOURCE_DIR}/cmake/entitlements.plist
                     --sign "$ENV{APPLE_CERTIFICATE_ID}"
                     "$<TARGET_FILE:${TARGET}>"
                 COMMENT "Code Signing for macOS: $<TARGET_FILE_BASE_NAME:${TARGET}>")