These entitlement configurations are used when GN arg codesigning_identity
is set to non-empty string.

They must be kept in sync with [entitlements][1] used for codesigning releases:

[1]: https://dart.googlesource.com/recipes/+/refs/heads/main/recipes/release/sign-mac.resources/Entitlements_dart.plist