automation around entitlements and change of team id and bundle id

[astletron]

This is a feature request, not a bug.

I'm thinking provise could be more useful with some changes around how entitlements are handled

Specifically:

• default behavior should be to preserve entitlements from old .ipa to new. This can be achieved with the --preserve-metadata=entitlements parameter to codesign.
• in addition to a new bundle id, user should be able to specify a new team identifier and provise should change appropriate values in the entitlements to match. This would involve dumping the current entitlements (codesign -d --entitlements :tmp-entitlements.plist), doing a search and replace on team identifier and/or bundle id, and then specifying use of the new entitlements during signing (codesign -f --entitlements entitlements.xml).

I have validated that these process work manually. Am willing to create a pull request if you reckon this is a good idea.