add allow-jit entitlement (fixes Apple Silicon builds)

[meadowsys]

Apple Silicon macOS builds have been broken since the introduction of second-mate. This is because loading the wasm of vscode-oniguruma fails. As stated in this comment, enabling the com.apple.security.cs.allow-jit entitlement would fix the issue, and it has. I can imagine a not insignificant amount of wasm packages, so if this would be a problem for those, this PR would fix them as well.

[confused-Techie]

Super impressive find here, fingers crossed this works as we hope!

[meadowsys]

Might need a few more Apple Silicon users to confirm (test master, test this one), but I have tested it myself using a commit build (on this run, direct dmg download link) and it does seem to fix the issue >w<

[mauricioszabo]

@meadowsys can I, or you, merge back master on this? master is now running the visual tests using the MacOS binaries that we generated, so if Cirrus pass we can say that this issue is fixed :)

[meadowsys]

sure @mauricioszabo you can do it c:

[mauricioszabo]

@meadowsys done, let's see if CI works :)

[mauricioszabo]

@meadowsys here's a timeline:

1. I merged back master to it, and every build failed
2. We found that master was also failing on every build, so we went to investigate and found that i18n feature was responsible to breaking builds, so we reverted it
3. I merged back master to this branch;
4. Finally, we now are back to green here - full green, including Silicon.

So, can we merge this one?

[meadowsys]

Sounds good, I can merge it