apparently, we don't validate that the entitlements files for macOS codesigning have the correct contents until we actually try to codesign them as part of the release workflow. this leads to fire drills such as: #153532

• We should validate the entitlements files for executable binaries built for macOS in presubmit on the main branch
• We should consider deprecating the framework verify binaries are codesigned integration test