Detect shared executable targets by file identity and skip runtime path masking when a deny would block multiple command names, with debug diagnostics on Linux and macOS.

Not sure this is the right way to go about this, but at least that does fix my problem.

To describe again:

Multi call binaries (like busybox, modern coreutils, python, ...) have many symlinks that point to the same binary and perhaps work differently depending on how they are called.

So for coreutils, dd is a symlink to it, but so does ls, cat, ... So blocking coreutils because dd resolves to it is not a good idea.

Closes: #67