yes
yes
maybe, but usually you put this stuff into the app data folder during installation and don't ask the user (you only ask him to put the big sample library files).
It's a not straightforward and supper complex process. The sounds don't need to be signed if they are external files but if you keep them in the binary, you'll have to sign the entire package.
