Also clean up how $(SignCoreSdk) is set so that `build -sign` does so and allows a full dry run locally.