Use --deep flag when code signing under OS X

It is now required in new versions of OS X that the embedded Python framework is signed separately.