Fix Tart release signing (#1286)

.github/workflows/release.yml

@@ -28,6 +28,7 @@ jobs:
           persist-credentials: false
       - name: Import signing certificate
         env:
+          AC_PASSWORD: ${{ secrets.AC_PASSWORD }}
           KEYCHAIN_PASSWORD: temporary-password
           MACOS_CERTIFICATE: ${{ secrets.MACOS_CERTIFICATE }}
           P12_PASSWORD: password101
@@ -48,6 +49,11 @@ jobs:
             -k "$KEYCHAIN_PASSWORD" \
             "$RUNNER_TEMP/build.keychain"
           security list-keychain -d user -s "$RUNNER_TEMP/build.keychain"
+          xcrun notarytool store-credentials "notarytool" \
+            --apple-id "hello@cirruslabs.org" \
+            --team-id "9M2P8L4D89" \
+            --password "$AC_PASSWORD" \
+            --keychain "$RUNNER_TEMP/build.keychain"
       - name: Create release app token for this repo
         id: app-token
         uses: actions/create-github-app-token@1b10c78c7865c340bc4f6099eb2f838309f1e8c3 # v3.1.1