How to codesign a PyInstaller + PyQt app on Mac OSX avoiding “binary is not signed” errors after notarizing the app?

Question

I have followed various PyInstaller recipes to code sign my Mac OSX PyQt5-based app , including: https://github.com/pyinstaller/pyinstaller/wiki/Recipe-OSX-Code-Signing-Qt