Enable hardened runtime and timestamp for notarization

- Enable ENABLE_HARDENED_RUNTIME for Release builds
- Add --timestamp flag to code signing
- Disable base entitlements injection to remove get-task-allow

Author: StuartCameronCode

clive.xcodeproj/project.pbxproj

@@ -389,10 +389,13 @@
 				ASSETCATALOG_COMPILER_GLOBAL_ACCENT_COLOR_NAME = AccentColor;
 				CODE_SIGN_ENTITLEMENTS = "";
 				CODE_SIGN_IDENTITY = "Developer ID Application";
+				CODE_SIGN_INJECT_BASE_ENTITLEMENTS = NO;
 				CODE_SIGN_STYLE = Manual;
 				COMBINE_HIDPI_IMAGES = YES;
 				CURRENT_PROJECT_VERSION = 1;
 				DEVELOPMENT_TEAM = PMXZ63S6YG;
+				ENABLE_HARDENED_RUNTIME = YES;
+				OTHER_CODE_SIGN_FLAGS = "--timestamp";
 				GENERATE_INFOPLIST_FILE = NO;
 				INFOPLIST_FILE = clive/Info.plist;
 				INFOPLIST_KEY_CFBundleDisplayName = Clive;