fix(release): ad-hoc sign packaged binaries

Author: lynnswap

scripts/build-release.sh

@@ -102,7 +102,7 @@ for product in "${products[@]}"; do
   cp "$source_path" "$target_path"
   chmod +x "$target_path"
   if command -v codesign >/dev/null 2>&1; then
-    codesign --remove-signature "$target_path" >/dev/null 2>&1 || true
+    codesign --force --sign - "$target_path" >/dev/null
   fi
 done
 

scripts/package-universal.sh

@@ -110,7 +110,7 @@ for product in "${products[@]}"; do
   lipo -create -output "$target" "$arm_bin/$product" "$x86_bin/$product"
   chmod +x "$target"
   if command -v codesign >/dev/null 2>&1; then
-    codesign --remove-signature "$target" >/dev/null 2>&1 || true
+    codesign --force --sign - "$target" >/dev/null
   fi
 done