Move tails-spoof-mac out of the $PATH.

Refs: #10658

config/chroot_local-includes/etc/udev/rules.d/00-mac-spoof.rules

 # Note: ATTR{type}=="1" means ethernet (ARPHDR_ETHER, see Linux'
 # sources, beginning of include/linux/if_arp.h)
-SUBSYSTEM=="net", ACTION=="add", ATTR{type}=="1", RUN+="/usr/local/sbin/tails-spoof-mac $name"
+SUBSYSTEM=="net", ACTION=="add", ATTR{type}=="1", RUN+="/usr/local/lib/tails-spoof-mac $name"

refresh-translations

@@ -11,7 +11,7 @@ PYTHON_PROGS="/etc/whisperback/config.py \
 SHELL_PROGS="/etc/NetworkManager/dispatcher.d/60-tor-ready.sh \
    /usr/local/bin/electrum \
    /usr/local/bin/tails-upgrade-frontend-wrapper \
-   /usr/local/sbin/tails-spoof-mac \
+   /usr/local/lib/tails-spoof-mac \
    /usr/local/sbin/tails-i2p \
    /usr/local/sbin/i2p-browser \
    /usr/local/bin/tor-browser \

wiki/src/contribute/design/MAC_address.mdwn

@@ -440,7 +440,7 @@ used in a very straightforward way, so if we want to switch tool in
 the future it's a simple task.
 
 Helper scripts:
-[[!tails_gitweb config/chroot_local-includes/usr/local/sbin/tails-spoof-mac]]
+[[!tails_gitweb config/chroot_local-includes/usr/local/lib/tails-spoof-mac]]
 
 <a id="limitation-only-spoof-nic-part"></a>
 
@@ -508,7 +508,7 @@ repeat the MAC spoofing until a new address is obtained, with up to
 three tries.
 
 Script:
-[[!tails_gitweb config/chroot_local-includes/usr/local/sbin/tails-spoof-mac]]
+[[!tails_gitweb config/chroot_local-includes/usr/local/lib/tails-spoof-mac]]
 
 ## Connection failure detection