OK, I've make decision for this time:
1) It's not a problem for macos gatekeeper if you update any files in your .app signed with developer id after first launch
2) Nobody could guarantee that any meta willn't be replaced by somebody
So, there is no reasons to care about it :)