Use mkapp to build a signed, sandboxed OS X app, and pack it into a DMG.