GitLab

This changes sign_app.sh to take a provisioning profile path as an
argument, which it will copy into the app bundle Content/ directory. It
then signs the app with --entitlements pointing at a newly created
entitlements.plist file, in order to grant the keychain-access-group
entitlement.

The entitlement is needed to create and access cryptographic key
material in the Secure Enclave Processor (SEP) on compatible macOS
devices.

Bug: 848052
Change-Id: Ib002fc73d250409e555f4caee8848a2c3e95e591
Reviewed-on: https://chromium-review.googlesource.com/1079833
Commit-Queue: Martin Kreichgauer <martinkr@google.com>
Reviewed-by: Robert Sesek <rsesek@chromium.org>
Reviewed-by: Nico Weber <thakis@chromium.org>
Reviewed-by: Avi Drissman <avi@chromium.org>
Cr-Commit-Position: refs/heads/master@{#565027}