macosx: Get code sign identity from file instead of envvar