If I update my APNS certificate or GCM key and re-deploy updated *.wlapp on worklight console,
Do I need to re-distribute my .ipa and .apk or only the server has to correspond with the certificate and key??
Because the APNS certificate and GCM key are server-side artifacts (in the case of Worklight-based apps, AFAIK), this means that they do not reside in the application.
The answer is, then: no, you are not required to re-distribute your applications to the App Store and/or Google Play.