[eas-cli] Fail when --private-key-path is set without codeSigningCertificate (#4161)