build: Move nss_wrapper to third_party