Fix hardened runtime / app notarization issues with scripting languages

[ychin]

The current released binary (snapshot 160) uses hardened runtime, which prevents scripting languages like Python from working when using e.g. :python commands. Need to fix that by using get-task-allowed entitlement, which seems to be the only one that works (documentation suggests it's not allowed to distribute apps using it but actually trying to notarized apps with it still result in the app being approved despite a warning).