I imagine Steam doesn't allow Gatekeeper bypasses. Still, notarization is designed to be easy to script: https://developer.apple.com/documentation/xcode/notarizing_y... - so it really shouldn't be an issue.
Split the build process so that you can click "version 1.2.3" and have it notarized (this is doable in Jenkins for example)