[Sandbox] Ensure RubyGems loads the CP gem on system Ruby.
[Sandbox] Allow any tool inside the Xcode.app bundle to be executed.