Set up signed distribution of Tophat

We should make it easier to download and install Tophat without needing to clone the source and build from scratch by distributing a signed and notarized application.

We can consider also implementing the [Sparkle updater](https://github.com/sparkle-project/Sparkle) so that users get a more seamless update experience without needing to distribute updates manually.