Describe the bug

gh 2.8.0 does not run on macOS without disabling system security settings because the binary is not code signed.

Steps to reproduce the behavior

1. Download and extract gh 2.8.0 macOS binaries
2. Run codesign -verify <path to gh>
3. See error:

> codesign -verify ./gh_2.8.0_macOS_amd64/bin/gh
./gh_2.8.0_macOS_amd64/bin/gh: code object is not signed at all

Expected vs actual behavior

Binaries shipped in releases for macOS should be codesigned