Move API key to separate file, fix signing.
Remove sandboxing, remove expiration.

These things were just causing bad mojo (sandboxing doesn't work with Sparkle
Updater, expiration was just annoying.)
Bump version to 0.4.3, use auto update signing.

This uses the code signing to verify updates, instead of the old manual signing.
Use default Xcode archs settings.