Can a contract SIGN a transaction without an EOA?

I think is impossible but perhaps I'm missing something. Basically what I need is a contract that when a payment is received, it will sign a transaction with a key and give the signed transaction back to the user. I understand this is not possible because to sign the transaction you would need the private key.

This would change when/if ERC 4337 is merged.