Use nix wrappers for apple-fs helpers

[oferchen]

Summary

• replace the apple-fs mkfifo/mknod implementations with nix wrappers to remove unsafe blocks
• enforce unsafe_code denial in the apple-fs crate and depend on nix for filesystem helpers
• update Cargo.lock for the new dependency

Testing

• cargo test -p apple-fs --all-features

---

Codex Task