Allow programs to set `NO_SHARED` on a per-prog basis

[ngie]

Summary

This is particularly useful when installing programs for tests that need to be
linked statically, e.g., mini-me from capsicum-test, which is linked statically
to avoid the dynamic library lookup in the upstream project.

MFC after: 1 month

Test Plan

Some programs from ^/projects/capsicum-test linked statically via this change:

$ file /usr/tests/sys/capsicum-test/mini-me*
/usr/tests/sys/capsicum-test/mini-me:        ELF 64-bit LSB executable, x86-64, version 1 (FreeBSD), statically linked, for FreeBSD 13.0 (1300012), FreeBSD-style, stripped
/usr/tests/sys/capsicum-test/mini-me.noexec: setuid ELF 64-bit LSB executable, x86-64, version 1 (FreeBSD), statically linked, for FreeBSD 13.0 (1300012), FreeBSD-style, stripped
/usr/tests/sys/capsicum-test/mini-me.setuid: setuid ELF 64-bit LSB executable, x86-64, version 1 (FreeBSD), statically linked, for FreeBSD 13.0 (1300012), FreeBSD-style, stripped

[emaste]

The downside of adding these is just the extra loops?

[ngie]

In D19756#423446, @emaste wrote:

The downside of adding these is just the extra loops?

In make, it'd be an extra loop, yeah...