build: Clean up the dmg layout
build: add a deterministic dmg signer
docs: add docs for osx dmg signing