CLSA-2025-1766233299 go-rpm-macros: Fix of CVE-2025-47906

CVE-2025-47906: fix unexpected paths returned from LookPath in os/exec...