[toyg]

Maemo / MeeGo had what you talk about: a store built on top of apt. If I remember correctly, they managed it by adding (on package install through the store gui) package-specific repositories that required authentication. So you could keep using apt-get in the normal way from free repos, receive updates etc.