Let the hardened-runtime build load Sparkle

The Release build is ad-hoc signed with the hardened runtime on, while
Sparkle.framework ships signed by the Sparkle project. Library validation
then refused the framework for having a different team, and the app aborted
at launch with a missing-library error. Add the disable-library-validation
entitlement so the embedded framework loads.

Author: bsramin

Sources/PassQuickAccess/App/PassQuickAccess.entitlements

@@ -0,0 +1,12 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
+<plist version="1.0">
+<dict>
+	<!-- The app is ad-hoc signed (no Apple team), but Sparkle.framework ships
+	     signed by the Sparkle project. Under the hardened runtime, library
+	     validation refuses to load a framework with a different team, which
+	     crashes the app at launch. This lets it load the embedded Sparkle. -->
+	<key>com.apple.security.cs.disable-library-validation</key>
+	<true/>
+</dict>
+</plist>

project.yml

@@ -43,6 +43,7 @@ targets:
       base:
         PRODUCT_BUNDLE_IDENTIFIER: it.ramin.PassQuickAccess
         INFOPLIST_FILE: Sources/PassQuickAccess/App/Info.plist
+        CODE_SIGN_ENTITLEMENTS: Sources/PassQuickAccess/App/PassQuickAccess.entitlements
         ASSETCATALOG_COMPILER_APPICON_NAME: AppIcon
         # The app launches a subprocess (pass-cli), which the App Sandbox
         # forbids, so it is unsandboxed.