Fix: don't apply entitlements to libraries

Regression in
a722b4a

Makefile

@@ -330,10 +330,11 @@ payload: native java jre assets
 	if [ '$(SLIMMED_ONLY)' != '1' ]; then \
 		cp -R $(OUTPUTDIR)/java_runtimes $(OUTPUTDIR)/Payload/PojavLauncher.app; \
 	fi
+	ldid -S $(OUTPUTDIR)/Payload/PojavLauncher.app; \
 	if [ '$(TROLLSTORE_JIT_ENT)' == '1' ]; then \
-		ldid -S$(SOURCEDIR)/entitlements.trollstore.xml $(OUTPUTDIR)/Payload/PojavLauncher.app; \
+		ldid -S$(SOURCEDIR)/entitlements.trollstore.xml $(OUTPUTDIR)/Payload/PojavLauncher.app/PojavLauncher; \
 	else \
-		ldid -S$(SOURCEDIR)/entitlements.sideload.xml $(OUTPUTDIR)/Payload/PojavLauncher.app; \
+		ldid -S$(SOURCEDIR)/entitlements.sideload.xml $(OUTPUTDIR)/Payload/PojavLauncher.app/PojavLauncher; \
 	fi
 	chmod -R 755 $(OUTPUTDIR)/Payload
 	if [ '$(PLATFORM)' != '2' ]; then \

Natives/LauncherNavigationController.m

@@ -355,7 +355,7 @@ - (void)invokeAfterJITEnabled:(void(^)(void))handler {
             handler();
         });
         return;
-    } else if (getEntitlementValue(@"local.sandboxed-jit")) {
+    } else if (getEntitlementValue(@"com.apple.private.local.sandboxed-jit")) {
         NSURL *jitURL = [NSURL URLWithString:[NSString stringWithFormat:@"apple-magnifier://enable-jit?bundle-id=%@", NSBundle.mainBundle.bundleIdentifier]];
         [UIApplication.sharedApplication openURL:jitURL options:@{} completionHandler:nil];
         // Do not return, wait for TrollStore to enable JIT and jump back

entitlements.sideload.xml

@@ -18,7 +18,7 @@
     <true/>
 
     <!-- Custom entitlement to indicate this was installed with TrollStore, still sandboxed -->
-    <key>local.sandboxed-jit</key>
+    <key>com.apple.private.local.sandboxed-jit</key>
     <true/>
 </dict>
 </plist>