On Zap Store, developers sign app releases with their Nostr key, which serves as a verification method without a central authority