this fixed the circular dependency in the build_and_publish script than internally imports the macos_sign