DulySigned e-signature
Prove you maintain app.dulysigned/dulysigned and your listing shows a verified maintainer badge.
Sign in first, so the claim is yours. Then prove you control dulysigned.app with a DNS record or a file on the site. You don't need GitHub for this.