Actually, we are creating the a service marketplace, and meet the same
problem, too: when we add a new service from the service marketplace, it
need to be registered in the CF side.

But with the service broker, we can manage the services just like managing
the instances. You can set a usage restrictions on the service, make it
only be consumed by a given team/org (defined in CF).