kitty: work around ld64 hardening issue

pkgs/by-name/ki/kitty/package.nix

@@ -45,6 +45,8 @@
   makeBinaryWrapper,
   darwin,
   cairo,
+  # TODO: Clean up on `staging`.
+  llvmPackages,
 }:
 
 with python3Packages;
@@ -117,6 +119,8 @@ buildPythonApplication rec {
     imagemagick
     libicns # For the png2icns tool.
     darwin.autoSignDarwinBinariesHook
+    # TODO: Clean up on `staging`.
+    llvmPackages.lld
   ]
   ++ lib.optionals stdenv.hostPlatform.isLinux [
     wayland-scanner
@@ -153,6 +157,10 @@ buildPythonApplication rec {
     CGO_ENABLED = 0;
     GOFLAGS = "-trimpath";
     GOTOOLCHAIN = "local";
+  }
+  # TODO: Clean up on `staging`.
+  // lib.optionalAttrs stdenv.hostPlatform.isDarwin {
+    NIX_CFLAGS_LINK = "-fuse-ld=lld";
   };
 
   configurePhase = ''