> What are open source/free projects supposed to do about gatekeeper?

They're supposed to pay up.

The signing Developer Certificate Utility at https://developer.apple.com/certificates/ rejects accounts that are not paid members of the Mac Developer Program, and a footnote at https://developer.apple.com/resources/developer-id/ states that "Mac Developer Program membership is required to access the tools and resources for distributing Mac applications."