There is some previous discussion of how this could be automated without introducing a significantly greater security risk than the manual transfer of the APKs to an air-gapped machine at What triggers a build of new app versions? - #22 by sorenstoutner.
2 Likes