As far I can tell, you can compile the binary and sign your app.

# From a Git checkout

$ cargo run --bin rcodesign -- --help

$ cargo install --bin rcodesign

# Remote install.

$ cargo install --git https://github.com/indygreg/PyOxidizer --branch main --bin rcodesign apple-codesign