Absolute path to the bubblewrap binary from
GLib.Environment.find_program_in_path("bwrap")
at construction, or empty if not found. Callers should use #can_wrap before constructing Bubble
; same string is used as spawn argv0 and for seccomp /proc/pid/exe checks.