Function: combineSignResults()
combineSignResults(
results):SigningResult
Folds per-file sign results into the single result signApp reports: any signed result wins
(the afterSign hook must fire when at least one file was actually signed); otherwise the first
skip reason is returned. An empty set means no file matched the signing filters at all.