Previously, released MacOS ARM64 binaries were uploaded unsigned.

This PR adds a new script to sign and upload release binaries.

Release note: None