Notarise macOS builds

Builds for macOS are not currently notarised, which means that users need to reduce the security of their system in order to use it. We should be signing release builds; Secret Lab can sponsor the signing, using our existing Apple Developer account.