[CMake] Attempt to fix code signing on macOS

Signed-off-by: Christian Parpart <christian@parpart.family>

Author: christianparpart

src/contour/CMakeLists.txt

@@ -405,7 +405,17 @@ elseif(APPLE)
                     -verbose=1
                     -no-strip
                     -qmldir=${CMAKE_CURRENT_SOURCE_DIR}/ui
-                    \"-codesign=${CODE_SIGN_CERTIFICATE_ID}\"
+        )
+        execute_process(
+            COMMAND codesign
+                --force
+                --verbose
+                --deep
+                --options=runtime
+                --timestamp
+                --entitlements \"${PROJECT_SOURCE_DIR}/support/macOS/entitlements.plist\"
+                --sign \"${CODE_SIGN_CERTIFICATE_ID}\"
+                \"\${CMAKE_INSTALL_PREFIX}/contour.app\"
         )
     ")
 else()

support/macOS/entitlements.plist

@@ -0,0 +1,10 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
+<plist version="1.0">
+<dict>
+    <key>com.apple.security.cs.allow-jit</key>
+    <true/>
+    <key>com.apple.security.cs.disable-library-validation</key>
+    <true/>
+</dict>
+</plist>