Don't trace through problem binaries on OS X

See https://github.com/github/semmle-code/pull/37764

Author: Sauyon Lee

codeql-tools/osx64/compiler-tracing.spec

@@ -5,3 +5,18 @@
   invoke ${config_dir}/go-extractor
   prepend --mimic
   prepend "${compiler}"
+/usr/bin/codesign:
+  replace yes
+  invoke /usr/bin/env
+  prepend /usr/bin/codesign
+  trace no
+/usr/bin/pkill:
+  replace yes
+  invoke /usr/bin/env
+  prepend /usr/bin/pkill
+  trace no
+/usr/bin/pgrep:
+  replace yes
+  invoke /usr/bin/env
+  prepend /usr/bin/pgrep
+  trace no