deps: Add cmake

PyPI has no arm64 macOS wheel for keystone-engine, so pip builds it
from the sdist, whose make-share.sh invokes cmake directly. Without
it the build fails silently and installs bindings with no native
library, which is what the libkeystone repair recovers from.

scripts/setup_tools.sh

@@ -27,7 +27,7 @@ ensure_repo_submodule() {
 
 echo "[1/4] Checking brew packages..."
 
-BREW_PACKAGES=(aria2 gnu-tar openssl@3 ldid-procursus sshpass zstd)
+BREW_PACKAGES=(aria2 gnu-tar openssl@3 ldid-procursus sshpass zstd cmake)
 BREW_MISSING=()
 
 for pkg in "${BREW_PACKAGES[@]}"; do