Harden our macOS builds
We ship our .dmg files properly notarized since Tor Browser 9 (see: legacy/trac#30126 (moved)). The Hardened Runtime allows us, however, to tighten down our application further in general, and with respect to what Mozilla is using in particular (we are currently using their production entitlements file).
This is the parent ticket for different issues that have piled up since legacy/trac#30126 (moved) got resolved.
To upload designs, you'll need to enable LFS and have an admin enable hashed storage. More information