Update signing infrastructure to work with Apple's notarization process

We have some working way of dealing with Apple's notarization requirement. We should now update our signing infrastructure with what we've learned so far.