.pkg files contain binaries that need to be signed. Today we unpack and repack these in staging, so we can sign and notarize the executables within. Expand support for this in signtool.