ci: fix mac library build to sign and notarize library (#7765)

* ci: fix mac library build to sign and notarize library

* script

* sign and notarize to test

* remove test build

---------

Co-authored-by: Evgeny @ SimpleX Chat <259188159+evgeny-simplex@users.noreply.github.com>

scripts/ci/sign-libs-mac.sh

@@ -0,0 +1,31 @@
+#!/bin/bash
+
+set -euo pipefail
+
+libs=$1
+team=5NN7GUYB6T
+keychain=/tmp/simplex.keychain
+temp=$(mktemp -d)
+trap 'rm -rf "$keychain" "$temp"' EXIT
+
+notarytool() {
+  xcrun notarytool "$@" --apple-id "$APPLE_SIMPLEX_NOTARIZATION_APPLE_ID" --password "$APPLE_SIMPLEX_NOTARIZATION_PASSWORD" --team-id "$team"
+}
+
+echo "$APPLE_SIMPLEX_SIGNING_KEYCHAIN" | base64 --decode -o "$keychain"
+security unlock-keychain -p "" "$keychain"
+security list-keychains -s $(security list-keychains | xargs) "$keychain"
+
+for lib in "$libs"/*.dylib; do
+  codesign --remove-signature "$lib"
+  codesign --timestamp --options runtime --force --sign "Developer ID Application: SimpleX Chat Ltd ($team)" --keychain "$keychain" "$lib"
+done
+
+ditto -c -k --keepParent "$libs" "$temp/libs.zip"
+notarytool submit "$temp/libs.zip" --wait --timeout 1h --output-format json > "$temp/submission.json" || true
+cat "$temp/submission.json"
+read -r id status < <(python3 -c 'import json, sys; r = json.load(open(sys.argv[1])); print(r["id"], r["status"])' "$temp/submission.json")
+notarytool log "$id"
+if [ "$status" != Accepted ]; then
+  exit 1
+fi