Move the default realm path on OS X to Application Support

And when not running in a sandbox, use the bundle identifier as a subdirectory name so that each application has its own default realm file rather than sharing them, falling back to the executable name if it's not running in a bundle.

@alazier @jpsim 
We should only be doing this for the defaultRealm. Could move to where we figure out the default path.