tools/sign-dmg.py: clarify comment about .cfg comments.