Enable SignTool to process and and submit MacOS .pkgs for signing and notarization. Because notarization can only happen on a Mac machine, this requires #14431 to be complete.

One place to start with this is looking at what we do in the staging pipelines.