Blender Git Loki

Codesign: Tweaks to make it work on final machines

Codesign: Fix abort when xcrun returns non-zero code

Codesign: Allow input be relative path

Codesogn: Don't capitalize single word

Makes it compatible with Blender's BundleID.

Codesign: Recognize in-progress status

Codesign: Correct bundle identifier

Apparently, it can not contain underscore.

Codesign: Correct appplication bundles files collection

Made it so it works from mounted DMG directory.

Codesign: More tweaks for non-Blender bundles

- Allow spaces in bundle name
- More correct logic to get volume name (for the case when there is no
'-' separator in the DMG name).

Codesign: Tweaks to be able to sign non-Blender bundles

Codesign: Allow signing standalone executable files

Codesign: Implement buildbot worker side DMG bundling

Is based on bundle.sh but is adopted to an environment where
codesigning is happening in a dedicated VM.

Also fixed some code from previous commits:

- Removed debug only early output when running commands
- Ensured that path to git is always valid
(wasn't a case when __file__ is relative to current directory).
- Fixed simple code signer which couldn't have imported util.

Codesign: Hook up notarial office

Codesign: Remove DMG codesign signature removal

Codesign tool reports that removing signature is not possible for DMG.

Codesign: Switch to TAR as an interchange format

Allows to preserve file mode through the signing process.

Codesign: Finish codesign step of bundling

Adds all the missing bits from the previous commit, and implements
extra required features: need to copy bundle's _CodeSignatures folder
from codesign machine to the worker machine.

Codesign: Initial implementation of macOS code signer

Main goal of this change is to make codesign step of release signing
to work on macOS. Development is currently was done on Linux based on
looking into what commands are being invoked.

Part of the change which touches other code signing utilities is
related on making it possible to test "foreign" code signers on a
different platform.