This is the problem: I have a MainApp that contains an HelperApp. The Helper app is used for the login items so i need to differentiate MainApp and HelperApp bundle IDs. I
I had exactly the same scenario: a MainApp that contains a HelperApp, which is used to launch the MainApp at login.
The "invalid binary - app sandbox not enabled" problem got resolved by making sure that the Code Signing Identity for both apps in XCode is set to "3rd Party Mac Developer Application".
Then, after submitting for review, I got the "Waiting for Review" notification and no more "invalid binary" errors.