santactl status discrepancy when running as root/non-root

[kallsyms]

When USB blocking/remounting is configured via sync server, there can be a discrepancy between what santactl status reports when run as root vs. non-root.

The santactl status command reads SNTConfigurator.blockUSBMount which first reads from syncState then falls back to configState if it was not configured via sync. The SNTConfigurator singleton init loads syncState by calling readSyncStateFromDisk, but this bails immediately if running with euid != 0.

Found this while working on #1214.

[russellhancox]

santactl should retrieve this from santad through an XPC method in SNTDaemonControlXPC service.