It looks like macOS arm64 architecture requires all Go binaries to be signed: golang/go#42684

We currently produce macOS binaries from Linux, but if we switch our release automation to compiling them from macOS, this might be enough to alleviate this. I'm not yet sure whether that would require the Actions runner to also be arm64.