Nostr onboarding for apps? (I don't understand that)
Does not store the nsec? (Most known clients support adding just a npub. But that just for viewing.)
Whatever you do on nostr is signed by the private key. Without such interaction I don't see any useful use 🤷