Notarization for macOS

[jpcima]

We support the code signature, this would be the next step.

• [ ] enable the hardened runtime / study how to do this without Xcode (preferably, and if possibly)
• [ ] identify the entitlements we need and write these down in XML
• [ ] find a way to automate the process