https://developer.mozilla.org/en-US/Add-ons/Distribution describes how to sign an extension, so it can be installed without having to set xpinstall.signatures.required preference to false.
This would allow providing signed releases on GitHub (additionally to the ones on AMO).
Sebastian