packaging: Sign OS X app bundles in release script