Do I have buy an SSL certificate to use https://myapp.appspot.com, or is it free of charge ?
It is possible to use SSL on custom domain on App Engine since 27 Jun 2012. Here is the documentation page: https://developers.google.com/appengine/docs/ssl