distro-build/installer-dmg: codesign whole ".app" instead of just exe

This change is needed for the more stringent Gatekeeper introduced in
Mac OS X 10.9.5, but the build machine has to be 10.9 or later to make
10.9.5 clients happy.
Fix typo (does -> doesn't).