Make wireguard connect work without sudo

[tadaskay]

1. Move node-supervisor code to node.
2. Add WireGuard remote client package for communication with supervisor.
3. Add ci build step to package supervisor for darwin.

[zolia]

What still concerns me is how we will secure such unix socket. Outside applications would be able to access these security lifted facilities pretty much effortlessly.

One possible way is to create a socketpair and send one socket end to peer using method like this:
https://blog.cloudflare.com/know-your-scm_rights/

Still this does not solve secure initial exchange problem. Somehow supervisor should be willing to communicate with authenticated node only.

Any ideas how to do that in most simple manner?