In case it’s helpful- apparently you can just use a secondary Apple ID (even one made just for this use) with AltStore and it works just as well without risking one’s main ID. (Though for 365 day signing, that’d also need to be added to its own, or a non-individual, dev team.)