Go's interface to macOS's keychain certificate store is currently broken

[copumpkin]

See #24058 #24124 for context. Basically Go programs should be able to check the system keychain for certificates but they currently segfault when trying to.

[LnL7]

"turns out" this is actually caused by #12346.
The go binary itself links against both the pure CF and Security.framework, the setup-hook added in #22571 only rewrites dylds at the moment.

$ otool -L result/bin/go
result/bin/go:
        /nix/store/k471jxzcf357xqwnxxadmknl5hqrh6lx-CF-osx-10.9.5/Library/Frameworks/CoreFoundation.framework/Versions/A/CoreFoundation (compatibility version 0.0.0, current version 0.0.0)
        /System/Library/Frameworks/Security.framework/Versions/A/Security (compatibility version 0.0.0, current version 0.0.0)
        /nix/store/il826qrrls32gjnmcqjlmhxxhrcy5lgz-Libsystem-osx-10.11.6/lib/libSystem.B.dylib (compatibility version 0.0.0, current version 0.0.0)
        /nix/store/il826qrrls32gjnmcqjlmhxxhrcy5lgz-Libsystem-osx-10.11.6/lib/libSystem.B.dylib (compatibility version 0.0.0, current version 0.0.0)
        /nix/store/il826qrrls32gjnmcqjlmhxxhrcy5lgz-Libsystem-osx-10.11.6/lib/libSystem.B.dylib (compatibility version 0.0.0, current version 0.0.0)

[LnL7]

Fixed by #27598