Considering passing -no_adhoc_codesign to top level binaries

ld64 automatically codesigns binaries in some cases, like when building on a M1 machine, this can be duplicative if we separately sign the binary right afterwards, we should investigate if it's safe for us to disable this in some cases

Start by examining how ld64 applies automatic codesigning to top-level binaries on M1 builds and where the -no_adhoc_codesign option could be passed. Determine whether disabling it is safe when binaries are signed separately afterward, and document the conditions or evidence needed before changing the build behavior.

Written by the indexing model from the issue text.