So sorry to have been the bearer of bad news about my testing, the game does work great once I've ad hoc signed it. Hopefully other Mac users can make use of a signed copy of DOSBox Staging for this.
Incidentally, ad hoc signed (run with `-s -` on codesign, after assembling it) does still show a "damaged" notice on machines other than the one it was assembled on, but usually lets you override it, either with right click / ctrl click running, or with the Security preferences page showing a notice for the last security failure and a button to authorize it, and it does remember until the app signature changes, ie. replaced or upgraded. I don't *think* it minds the profile file being inside the app bundle, but I could be wrong.
Love the game, it's pretty fun!