PyInstaller-packaged npm CLI fails in sandboxed environments with semctl Operation not permitted

## Summary

The npm-installed MemOS CLI can fail before the Python CLI app starts in sandboxed environments such as Codex Desktop.

The observed error is:

```text
[PYI-21611:ERROR] Failed to initialize sync semaphore!
semctl: Operation not permitted
[PYI-21611:WARNING] LOADER: failed to destroy sync semaphore (errno 1)!