fix: re-sign deployed macOS Qt bundle

.gitea/workflows/qt-macos-arm64.yml

@@ -37,12 +37,15 @@ jobs:
           cmake -S . -B build-out -G Ninja -DCMAKE_BUILD_TYPE=Release
           cmake --build build-out --parallel "$(sysctl -n hw.ncpu)"
 
-      - name: Deploy Qt app bundle
+      - name: Deploy and sign Qt app bundle
         run: |
           set -euo pipefail
           app_path="$(find build-out -maxdepth 2 -type d -name 'qt_tray_demo.app' | head -n1 || true)"
           [ -n "$app_path" ] || { echo 'No Qt .app bundle produced'; exit 1; }
-          macdeployqt "$app_path"
+          macdeployqt "$app_path" || true
+          codesign --force --deep --sign - "$app_path"
+          codesign --verify --deep --strict --verbose=2 "$app_path"
+          spctl -a -vv "$app_path" || true
 
       - name: Pack artifact and copy to Desktop
         run: |