allow environment variable notarytool (sic) overriding `xcrun notarytool`
(currently needed internally for alt builds to be able to use the sign.sh
script, because the notarytool is not in standard path /actually used
XCode 13 for higher macOS version/)