There are basically two options and they both suck. Either publish one app and distribute the push notification cert (terrible idea) or each hosted site needs it's own cert and thus an Apple account/published app (pain in the ass).