Use --preserve-metadata=identifier,entitlements option when signing embedded frameworks

When a `.framework` is embedded in an app/extension, Xcode uses the `--preserve-metadata=identifier,entitlements` option to sign it. It does NOT use the host app(ex)'s entitlements or provisioning profile. We should do the same in the bundling rules.

Likewise, when signing the Swift dylibs, Xcode omits the `--preserve-metadata` option as well (and also uses no entitlements). It's unclear whether that option would make a difference for those.

Start by locating the bundling rules that sign embedded .frameworks and Swift dylibs, then compare their signing behavior with the Xcode behavior described here. Done means embedded frameworks preserve only their identifier and entitlements, while the Swift dylib behavior is investigated and addressed if needed.

Written by the indexing model from the issue text.