Confine a command on macOS to one folder with Seatbelt, no container, so Metal stays reachable

No pipelines have been run yet.