We generally run tests with the --no-codesign flag to be able to run on machines missing the code signing cert. However, this means we are not actually testing codesigning, which allows bugs like #111475 to slip through.

Currently Mac_ios devicelab bots have the certs installed:

Also install the certs on all Mac bots so they can be used on hostonly tests without a device tethered.