The end goal is to require that all APKs that are shipped go through the fdroiddata review process, including CI, issuebot, and human review. New apps currently do meet this criteria, updates from checkupdates do not. This is the work needed to be done to make all updates go through fdroiddata merge requests, since that is the single point in our pipeline for CI, issuebot, and human review.