Use maintained gon fork to address Apple signing deprecation (pixie-io#1997)

Summary: Use maintained gon fork to address Apple signing deprecation

This is a continuation of pixie-io#1994. Rather than using the macos tools
directly, we can continue using gon by switching to the maintained fork
([github.com/Bearer/gon](https://github.com/Bearer/gon))

Relevant Issues: Closes pixie-io#1993

Type of change: /kind bugfix

Test Plan: cli-release GitHub workflow
[succeeds](https://github.com/pixie-io/pixie/actions/runs/10724342153/job/29740236170)
when built from this branch

Changelog Message: Fix macos signing for px cli releases

---------

Signed-off-by: Dom Del Nano <ddelnano@gmail.com>
GitOrigin-RevId: 3a76a27

Author: ddelnano

ci/cli_upload_signed.sh

@@ -1,4 +1,4 @@
-#!/usr/bin/env bash
+#!/bin/bash -ex
 
 # Copyright 2018- The Pixie Authors.
 #
@@ -21,8 +21,6 @@ repo_path=$(bazel info workspace)
 # shellcheck source=ci/artifact_utils.sh
 . "${repo_path}/ci/artifact_utils.sh"
 
-set -ex
-
 printenv
 
 release_tag=${TAG_NAME##*/v}

ci/gon.hcl

@@ -2,17 +2,16 @@
 // using Gon.
 
 source = ["./cli_darwin_amd64", "./cli_darwin_arm64", "cli_darwin_universal"]
-bundle_id = "ai.pixielabs.px"
+bundle_id = "ai.getcosmic.px"
 
-// TODO(zasgar): Update this to the orders@pixielabs.ai account. It has access to the certs,
-// but does not have access to application passwords.
 apple_id {
-  username = "zasgar@gmail.com"
-  password = "@env:AC_PASSWD"
+  username = "apple-dev@getcosmic.ai"
+  # Password is provided via AC_PASSWORD env var
+  provider = "769M9XJDG6"
 }
 
 sign {
-  application_identity = "Developer ID Application: Pixie Labs Inc. (SZCNTABEXY)"
+  application_identity = "Developer ID Application: Cosmic Observe, Inc."
 }
 
 zip {