macOS packages need to be notarized

Currently the only way to install this package on 10.15 is to right-click Open. On macOS 11 that option goes away unless you change the behavior in the Security tab of System Preferences.

This is apparently not difficult per Ned Deily who is doing this for the official Python installers, but tough to say if it's easy to do automatically from GHA.