loader.core.nar: Rely only on filesystem executable bit being set
This way also avoids checking the mountpoint permissions or the file owner, which currently results in nar mismatch on (nixguix) origins with executables (for various loaders e.g. tarball, git-checkout, ...) in our production setup.
I added tests but I could not really reproduce our container behavior.