macOS in CI

We should think through what macOS builds/tests we want to support in CI. At a minimum, I think it makes sense to check that clairctl builds (on each PR?).

Related issues:

• https://github.com/quay/clair/issues/2194
• https://github.com/quay/zlog/issues/49