Fix build with secure control plane

Since GraalVM version 24 is used, the `lkql` build breaks when the
_Secure Control Plane_ is enabled on `rocky8`.

The error message on failure is:
```
_[engine] WARNING: The Truffle API JAR is missing the 'truffleattach' resource, likely due to issues when Truffle was repackaged into a fat JAR.
_As a result, the optimized Truffle runtime is unavailable, and Truffle cannot provide native access to languages and tools.
_To customize the behavior of this warning, use the 'polyglotimpl.AttachLibraryFailureAction' system property.
```

The root cause of the issue is described by the graalvm issue
[8222](oracle/graal#8222), where the
`polyglot` package tries to create a `.cache` directory in the
`user.home` directory.

When using the _Secure Control Plane_, only the buildspace of the spec
is a writable directory.

Setting the `polyglot.engine.userResourceCache` variable to a writable
path fixed the problem, and it is now possible to build with
_Secure Control Plane_ enabled.

Closes eng/libadalang/langkit-query-language#549+

Author: grouigrokon

lkql_jit/standalone/make_native.py

@@ -1,7 +1,7 @@
 """----------------------------------------------------------------------------
 --                             L K Q L   J I T                              --
 --                                                                          --
---                     Copyright (C) 2023, AdaCore                          --
+--                   Copyright (C) 2023-2025, AdaCore                       --
 --                                                                          --
 -- This library is free software;  you can redistribute it and/or modify it --
 -- under terms of the  GNU General Public License  as published by the Free --
@@ -45,6 +45,8 @@
 import subprocess
 import sys
 
+from pathlib import Path
+
 sys.path.append("..")
 # noinspection PyUnresolvedReferences
 from utils import GraalManager, parse_args, is_windows
@@ -122,13 +124,23 @@ def look_for_files_in_env(files: list[str], env_var_name: str) -> dict[str, str]
 
     # Run the Native-Image compiler if required by the build process
     if "lkql_cli" in args.native_components:
+        # Get the buildspace tmp dir to set the polyglot cache path. When
+        # built in docker images (where only the buildspace is writable), the
+        # build crashes because it tries to create $HOME/.cache. This behavior
+        # may be overridden by the polyglot.engine.userResourceCache value.
+        # There is nothing in args (build_mode, classpath native_components) to
+        # give a clue about buildspace location, guess it from this file's path.
+        buildspace: Path = Path(__file__).parents[3]
+        tmp_path: Path = Path(buildspace, "tmp")
+
         # Create the base Native-Image command
         cmd = [
             graal.native_image,
             "-cp",
             args.classpath,
             "--no-fallback",
             "--initialize-at-build-time",
+            f"-Dpolyglot.engine.userResourceCache={tmp_path.as_posix()}",
             *os_specific_options,
         ]