add category and entitlements for signed, sandboxed bundle (Xcode)