This PR switches from using altool which has been deprecated in favor of notarytool
Also, now the plugin waits for the notarization process to finish, and staples the package automatically after that.

⚠️ Breaking changes

Now it is mandatory to specify teamID for notarization. The team ID can be passed using the compose.desktop.mac.notarization.teamID Gradle property:

./gradlew notarizeDmg \
          -Pcompose.desktop.mac.notarization.appleID=<APPLE_ID> \
          -Pcompose.desktop.mac.notarization.password=<PASSWORD> \
          -Pcompose.desktop.mac.notarization.teamID=<TEAM_ID>

Alternatively, the notarization settings can also be set using the DSL.
For example, it is possible to pass credentials using environment variables:

compose.desktop.application {
    nativeDistributions {
        macOS {
            notarization {
                val providers = project.providers
                appleID.set(providers.environmentVariable("NOTARIZATION_APPLE_ID"))
                password.set(providers.environmentVariable("NOTARIZATION_PASSWORD"))
                teamId.set(providers.environmentVariable("NOTARIZATION_TEAM_ID"))
            }
        }
    }
}

The compose.desktop.application.macOS.notarization.ascProvider DSL property and compose.desktop.mac.notarization.ascProvider Gradle property are now removed (the teamID property should be used instead).

The password for notarization cannot be passed using @keychain:PATH_TO_KEYCHAIN_LOCATION anymore.

The checkNotarizationStatus task is removed, since now the plugin waits for notarization to finish.

Additional information

Resolves #3208
Resolves #2253

The PR is based on the #3330 by @DRSchlaubi