Codesign & notarize the mac app

Currently the mac-builds are only launchable using rightclick-open and not at all on many machines. This can only properly be fixed by signing and notarizing the app, which requires an apple developer account 💸 , but i think we should finally take this step