Sign the Sparkle framework before signing the whole app to ensure proper code signature chain for sandboxed installation.