I'll answer my own post. You can not upload an app bundle (my-app.app) directly to the App Store. You need to upload a signed product package (my-app.pkg) to the store. This involves multiple steps including adding an entitlements file, adding the provisioning file, signing the app bundle and then finally creating and signing the product package.