macOs packaging: add notarization entitlements

Also:

• Make a more complete permission and cleanup of

Python.Framework.

• Add -name option to get a dmg with the final name

-name=krita-stable -> krita-stable.dmg