Merge branch 'backport-3.22-rel-macos-sign-notarize' into rel-macos-sign-notarize