macOS PlomClient binary is unsigned

Currently we distribute a PlomClient-<ver>-macos.app bundle for macOS.

The app is unsigned b/c we have not yet sorted out how to do that on our CI/CD infrastructure (help wanted!).

In the meantime, user have to jump through some hoops to make the client work. I will document those below.