Yeah I think that should work. It does have the downside still that changes to the website/github might break future updates in a way that isn't (easily) verif

Yeah I think that should work. It does have the downside still that changes to the website/github might break future updates in a way that isn't (easily) verifiable. While this is a solution personally I still like the idea of GPG more since it'll work for any new files, works for your new projects automagically, etc. But I think you did at least fix the future update problem with auto-updates, which is a lot more work then most people put into it so thank you for addressing the issue!