From Discord:

So my .app is already fully signed before packaging, however while running vpk pack codesign is being run again with option -f --deep which overwrites any existing signatures in the .app. I think none of the existing signatures should be overwritten, instead only UpdateMac and the main binary should still be signed. The app appears to break as it's signing the .dylib in a wrong way during this.