add "--deep" option, now required by codesign
Fix release signing
docs: make change log html