OSX packaging: support signing the resulting application bundle