> install as a .pkg, satisfy Apple signing

Keep in mind that a package installer becomes obsolete and nonfunctional when the code signing certificate expires, unlike an app.