Similar to the w32-release target we should have a macOS target that builds a release on macOS and signs it.
For that to work properly in our release process the build script should connect to a macOS System over SSH and do the required steps there. Dependencies should be based on the used swdb. So that we had "official" releases for macOS similar to the w32 installer.
Could take some input from:
https://sourceforge.net/p/gpgosx/source/ci/master/tree/