ENH: Sign Windows binary inplace

[larsoner]

We should be able to sign inplace now: SSLcom/actions-codesigner#1

This PR should do it, but I expect some timeout failures we'll need to debug before 1.4. No idea why it took so long on a couple of platforms when I was testing in an isolated branch in this repo, we'll see if it happens again.

[larsoner]

I vaguely recall somewhere in the conda or napari docs saying that pinning versions can speed up resolution. Given that resolution took ~30 minutes on macOS and we can get our list of outdated dependencies using python tests/test_outdated.py in ~1 min, I'm seeing what happens if I pin everything. Hopefully it runs much faster...

[larsoner]

By pinning:

• macOS: 30 min down to 9 min
• macOS ARM: 20 min down to 6 min
• Ubuntu: 24 min down to 5 min
• Windows: 15 min down to 11 min

[hoechenberger]

By pinning:

• macOS: 30 min down to 9 min
• macOS ARM: 20 min down to 6 min
• Ubuntu: 24 min down to 5 min
• Windows: 15 min down to 11 min

Amazing improvements!

I'm just worried we might run into dependency resolution errors someday if we start pinning too many things. But as long as it works, let's keep it!

[larsoner]

I did in 545caad actually but it was fairly easy to resolve. Agreed we should undo it later if needed. FWIW it also gives us some indication of when packages are not all up to date across all architectures due to conflicts, which is otherwise hidden/implicit. In this case currently it's only fsleyes on windows and vtk on Mac non-ARM.