emacs-app: codesign Emacs.app on Sequoia and later

Sequoia enforces code-signature validation, so the unsigned Intel
Emacs.app would not launch from the Finder. This is not an issue on
Apple Silicon, where the toolchain signs binaries automatically.

Closes: https://trac.macports.org/ticket/71232

editors/emacs/Portfile

@@ -144,7 +144,7 @@ platform darwin {
 
 if {$subport eq $name || $subport eq "emacs-app"} {
     version         30.2
-    revision        12
+    revision        13
     checksums       rmd160  fefdd3fcd453d733114f609a3e122b2529cc7410 \
                     sha256  1d79a4ba4d6596f302a7146843fe59cf5caec798190bcc07c907e7ba244b076d \
                     size    83059014
@@ -164,7 +164,7 @@ if {$subport eq "emacs-devel" || $subport eq "emacs-app-devel"} {
     github.tarball_from archive
     epoch           5
     version         20260602
-    revision        1
+    revision        2
 
     master_sites    ${github.master_sites}
 
@@ -301,6 +301,16 @@ if {$subport eq "emacs-app" || $subport eq "emacs-app-devel"} {
             ${destroot}${applications_dir}/Emacs.app/Contents/Resources/site-lisp/site-start.el
         reinplace "s|__GCC_EXEC_PREFIX__|${prefix}/lib/gcc${gcc_v}/gcc/|g" \
             ${destroot}${applications_dir}/Emacs.app/Contents/Resources/site-lisp/site-start.el
+
+        # Sequoia and later enforce code-signature validation so
+        # Emacs.app can't launch from the Finder without codesigning.
+        # This is only necessary on Intel because the ARM toolchain
+        # automatically codesigns, but it's harmless to rerun.
+        # See https://trac.macports.org/ticket/71232
+        if {${os.major} >= 24} {
+            system -W ${destroot}${applications_dir} \
+                "/usr/bin/codesign --force --deep --sign - Emacs.app"
+        }
     }
 
     variant imagemagick description {Use ImageMagick} {