Please sign and notarize macOS binary downloads

A user that can't use homebrew noted that the macOS downloads are not signed/notarized.

This is easier to do than it once was, but real notarization does require an Apple Developer account.

Homebrew does "ad-hoc" signing, which is a shortcut which has worked for them to date.