ad-hoc sign macOS native binary in release build

[shodiBoy1]

This PR fixes #451

Implemented changes:

• Ad-hoc sign the macOS native binary in release.yml and nightly-build.yml (after build, before upload, macOS only).
• Stops macOS Gatekeeper from killing the unsigned binary on launch.

---

Testing instructions

This only touches the macOS build jobs , so a local mvn build won't exercise it. Two ways to verify:

Verify now (any Mac, most visible on Intel):

1. Download a current mac-x64 release via the browser, extract it.
2. codesign -dv bin/ideasy reports "not signed at all", and ./bin/ideasy --version is killed (exit 137 + "developer cannot be verified").
3. Run the command this PR adds: codesign --force --sign - bin/ideasy
4. Run ./bin/ideasy --version again → it works.

Verify after merge:
Download the next nightly mac build and run codesign -dv bin/ideasy → it should report Signature=adhoc, and ./bin/ideasy --version runs from
a fresh download.

---

Checklist for this PR

Make sure everything is checked before merging this PR. For further info please also see
our DoD.

• When running mvn clean test locally all tests pass and build is successful
• PR title is of the form #«issue-id»: «brief summary» (e.g. #921: fixed setup.bat). If no issue ID exists, title only.
• PR top-level comment summarizes what has been done and contains link to addressed issue(s)
• PR and issue(s) have suitable labels
• Issue is set to In Progress and assigned to you or there is no issue (might happen for very small PRs)
• You followed all coding conventions
• You have added the issue implemented by your PR in CHANGELOG.adoc unless issue is labeled
  with internal
• You have formulated clear instructions on how to test your contribution under "Testing instructions"

[coveralls]

Coverage Report for CI Build 28375511141

Coverage increased (+0.004%) to 71.36%

Details

• Coverage increased (+0.004%) from the base build.
• Patch coverage: No coverable lines changed in this PR.
• 1 coverage regression across 1 file.

Uncovered Changes

No uncovered changes found.

Coverage Regressions

1 previously-covered line in 1 file lost coverage.

File	Lines Losing Coverage	Coverage
com/devonfw/tools/ide/version/VersionSegment.java	1	90.03%

---

Coverage Stats

Relevant Lines:	16274
Covered Lines:	12111
Line Coverage:	74.42%
Relevant Branches:	7284
Covered Branches:	4700
Branch Coverage:	64.52%
Branches in Coverage %:	Yes
Coverage Strength:	3.15 hits per line

---

💛 - Coveralls

[laim2003]

I wanted to test this today, but I forgot my mac at home... will do this either tonight or on Friday...