FYI: there's a new notarization REST API that one can use instead of local tooling (not sure if that will be easier for the R/R.app build workflows) https://developer.apple.com/documentation/notaryapi