Builder|macOS: Codesign and notarize as a post-build step

No need to do this multiple times for the client bundle.

doomsday/CMakeLists.txt

@@ -14,3 +14,4 @@ if (NOT IOS)
     endif ()
     add_subdirectory (tests)
 endif ()
+add_subdirectory (post)

doomsday/apps/client/CMakeLists.txt

@@ -205,7 +205,7 @@ if (TARGET DirectX)
     target_link_libraries (client PUBLIC DirectX)
 endif ()
 if (CMAKE_SYSTEM_NAME MATCHES "BSD")
-    target_link_libraries (client PUBLIC execinfo) 
+    target_link_libraries (client PUBLIC execinfo)
 endif()
 
 target_link_libraries (client PUBLIC Deng::libappfw Deng::libdoomsday)
@@ -324,5 +324,4 @@ if (MSVC)
     add_custom_command (TARGET client POST_BUILD COMMAND ${fn} ${_intDir})
 endif ()
 
-deng_codesign (client)
 deng_cotire (client include/precompiled.h)

doomsday/post/CMakeLists.txt

@@ -0,0 +1,11 @@
+include (../cmake/Config.cmake)
+
+if (APPLE)
+    # Code-sign and notarize the application bundles.
+    if (TARGET client)
+        deng_codesign (client)
+    endif ()
+    if (TARGET shell)
+        deng_codesign (shell)
+    endif ()
+endif ()

doomsday/tools/CMakeLists.txt

@@ -20,9 +20,3 @@ if (UNIX)
 endif ()
 add_subdirectory (texc)
 add_subdirectory (wadtool)
-
-if (APPLE AND TARGET client)
-    # Tools install files into the Doomsday.app bundle, so it must now be
-    # signed again.
-    deng_codesign(client)
-endif ()

doomsday/tools/shell/CMakeLists.txt

@@ -18,7 +18,7 @@ add_definitions (
 )
 
 file (GLOB SOURCES src/*.cpp src/*.h res/shell.qrc)
-set (MAC_RES 
+set (MAC_RES
     res/macx/shell.icns,Resources
     res/macx/English.lproj,Resources
 )
@@ -45,7 +45,6 @@ deng_target_link_qt (shell PUBLIC Widgets)
 # Deployment.
 deng_install_bundle_deps (shell Deng::libcore Deng::libshell)
 deng_install_deployqt (shell)
-deng_codesign (shell)
 
 if (UNIX AND NOT APPLE)
     configure_file (doomsday-shell.desktop.in net.dengine.Shell.desktop)

doomsday/tools/texc/CMakeLists.txt

@@ -11,9 +11,3 @@ set (DOC_DIR ${DENG_INSTALL_DOC_DIR}/texc)
 deng_install_tool (texc)
 install (FILES doc/texc.txt DESTINATION ${DOC_DIR})
 install (DIRECTORY examples DESTINATION ${DOC_DIR})
-
-if (APPLE AND TARGET client)
-    # Installed to app bundle, so must be re-signed.
-    # TODO: Build this before client, so it can be bundled cleanly.
-    deng_codesign (client)
-endif ()

doomsday/tools/wadtool/CMakeLists.txt

@@ -14,10 +14,3 @@ target_link_libraries (wadtool Deng::liblegacy)
 
 deng_target_rpath (wadtool)
 deng_install_tool (wadtool)
-
-if (APPLE AND TARGET client)
-    # Installed to app bundle, so must be re-signed. 
-    # TODO: Build this before client, so it can be bundled cleanly.
-    deng_codesign (client)
-endif ()
-