build: mark binary data as read-only with objcopy