The new upstream tree has a similar patch now.

Taken from Firefox tree in security/mac/hardenedruntime/production.entitlements.xml
in esr115 branch.

IN macos-signer-* we don't remove the loop, since those scripts are
going away soon.

In a previous commit we already updated projects/release/build for that,
however we re-generate the .htaccess file during the signing process, in
tools/signing/staticiforme-prepare-cdn-dist-upload.

Due to a typo, downloads-windows-x86_64.json and
downloads-linux-x86_64.json were not created.

Because of a difference between the investigation on adding PDBs and
the actual implementation, we were missing .pdb files for .exe files.

Bug 40976: Update download-unsigned-sha256sums-gpg-signatures-from-people-tpo to fetch from tb-build-02 and tb-build-03

Add some redirects, to make old filenames work for torbrowser-launcher.

In the firefox-android project we look for the geckoview artifacts to
detect its version.
For alpha and nightly its directory incldues the channel, so we were
looking for `geckoview-release-omni`, but for release the directory is
`geckoview-omni` only.

This is also fixing the download-windows-*.json files, which were
missing since the filename change (for now, we only includ the
`portable` build).

The changelog script works well also with Mullvad Browser, but there
are a few changes we need to do every time we use it for MB instead of
TBB.
With this commit we automate them.

In addition to that, we group items by project, as it makes reading the
changelog easier.

Debug symbols are not actually genereated because we used to have a
linking problem when they were enabled. So, we have been shipping a
tiny package only with generated headers in the last alphas.

Hopefully, this is a temporary change, so I disabled only the final
copy in projects/browser/build, but left the step in
projects/firefox/build enabled.

Bug 40741: Update browser, and tor-android-service projects to populate PT settings from pt_config.json

The new icons are differentiated on the channel basis, so also adjust
the NSIS script to take that into account.