Add syscall-based crypto seeding for OS X
Add SecRandomCopyBytes and perhaps CCRandomGenerateBytes to crypto_strongest_rand_syscall, appropriately guarded by header/library availability.
See #13696 (moved) for details, particularly: https://trac.torproject.org/projects/tor/ticket/13696#comment:13