Better OSX packaging

[crazyscot]

• Decide on architecture support (x86_64 vs aarch64) and whether a universal ("fat") binary is plausible / appropriate
• Look into platform installers and code signing
• Does code signing let us install into /usr/bin on a system with SIP?