Confine a command on macOS to one folder with Seatbelt, no container, so Metal stays reachable