System Integrity Protection (SIP) creating problem for oci_connect(): OCIEnvNlsCreate()
Oracle ships instant client libs with wrong search paths. You can manually fix them by using:

https://github.com/kubo/fix_oralib_osx

AFAIK SIP influences how library search path is working. DYLD_LIBRARY_PATH might be ignored when SIP is used.