I've spend the day working on a (stand-alone as a start) wizard to deal with all those steps required to reach an Apple Store compatible installer starting with a simple Darwin binary as created by Lazarus:
* Updating permissions
* Verifying Info.plist is including essential information for notarizing, and updating it from .lpi
* Telling the system to forget other locations
* Codesigning app bundle with entitlements and requirements for notarizing
* Creating installer package
* Codesigning installer package
* Starting notarizing installer package
It basically wraps a lengthly bash script with added validations.
Right now it has an included entitlements file editor (with only Sandbox entitlements implemented so far).
An Info.plist editor will be next.
Setting the fields or using a predefined defaults.ini for a single project is annoying, but it's getting somewhere it can be useful
https://gitlab.com/ccrdude/lazarus-mac-application-wizard