I'm honestly kind of surprised that this isn't a service that Apple offers directly. Keep it part of their walled garden. Only apps compiled on the ACC (Apple Cloud Compiler) will receive certificate signing which allows them to be offered in the AppStore. And by a service Apple offers, I of course mean a service Apple requires.