- Signing and notarizing is a pain.

- macdeployqt for qt5.12 is insufficent for modern codesigning, we use codesign tool aggressively

- GraphViz is built from source tarball, full static mode, just modified to include CoreGraphics as a plugin (modify source for this) for PDF support w/o fd.o sludge