tools: harden scripts

Refs: https://developer.apple.com/library/archive/documentation/OpenSource/Conceptual/ShellScripting/ShellScriptSecurity/ShellScriptSecurity.html#//apple_ref/doc/uid/TP40004268-CH8-SW2
Signed-off-by: Sebastian Davids <[email protected]>

Author: sdavids

tools/osx-pkg-postinstall.sh

@@ -3,7 +3,7 @@
 # TODO Can we extract $PREFIX from the installer?
 cd /usr/local/bin || exit
 
-ln -sf ../lib/node_modules/npm/bin/npm-cli.js npm
-ln -sf ../lib/node_modules/npm/bin/npx-cli.js npx
+/bin/ln -sf ../lib/node_modules/npm/bin/npm-cli.js npm
+/bin/ln -sf ../lib/node_modules/npm/bin/npx-cli.js npx
 
-ln -sf ../lib/node_modules/corepack/dist/corepack.js corepack
+/bin/ln -sf ../lib/node_modules/corepack/dist/corepack.js corepack