Code sign binaries after stripping wrt #318

.gitlab/script/ghcup_release.sh

@@ -36,7 +36,9 @@ mkdir out
 binary=$(ecabal new-exec -w ghc-${GHC_VERSION} --verbose=0 --offline sh -- -c 'command -v ghcup')
 ver=$("${binary}" --numeric-version)
 if [ "${OS}" = "DARWIN" ] ; then
-	# due to some code signing issues on M1s, we just skip stripping altogether
+	strip "${binary}"
+	# https://gitlab.haskell.org/haskell/ghcup-hs/-/issues/318
+	codesign -s - -o linker-signed -i ghcup -v "${binary}"
 	:
 else
 	strip -s "${binary}"