build: sign the exe that we put in the installer; retry signing