Use a different certificate for MacOS

Replace our reference to an Apple development certificate with a
Developer ID Application certificate. The former is not accepted during
the code notarization phase, whereas the latter is.

RELEASE.md

@@ -165,7 +165,7 @@ git checkout v$VERSION
 To make a macOS release, go to macOS build machine:
 
 - Build machine must have:
-  - Apple-trusted `Apple Development: Trevor Timm (TW4JVM8ZCU)` code-signing certificates installed
+  - Apple-trusted `Developer ID Application: Freedom of the Press Foundation (94ZZGGGJ3W)` code-signing certificates installed
 - Verify and checkout the git tag for this release
 - Run `poetry install`
 - Run `poetry run ./install/macos/build-app.py`; this will make `dist/Dangerzone.app`

install/macos/build-app.py

@@ -75,7 +75,7 @@ def sign_app_bundle(build_path, dist_path, app_path):
     icon_path = os.path.join(root, "install", "macos", "dangerzone.icns")
 
     print("○ Code signing app bundle")
-    identity_name_application = "Apple Development: Trevor Timm (TW4JVM8ZCU)"
+    identity_name_application = "Developer ID Application: Freedom of the Press Foundation (94ZZGGGJ3W)"
     entitlements_plist_path = os.path.join(root, "install/macos/entitlements.plist")
 
     for path in itertools.chain(