build: add macos signing to release workflow

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

package.json

@@ -135,7 +135,11 @@
       ],
       "icon": "assets/icons/macos/icon.icns",
       "category": "public.app-category.developer-tools",
-      "identity": "-",
+      "hardenedRuntime": true,
+      "entitlements": "assets/entitlements.mac.plist",
+      "entitlementsInherit": "assets/entitlements.mac.inherit.plist",
+      "gatekeeperAssess": false,
+      "notarize": true,
       "artifactName": "Aryx-macos-${arch}.${ext}"
     },
     "linux": {