CI code signing

[getaaron]

To get code signing to work on CI, I recommend setting up fastlane match which creates and encrypts code signing certificates in a separate git repo. Then you store the decryption key in your CI's secret store. This will allow CI to create code-signed downloadable apps. I'm happy to set it up if you want (will need access to a few things).