Fix a few static analyzer issues.
Fix the unpackgogsetup target to use the wildcard Developer ID code signature setting.