Prove you maintain com.incidentvault.app/incidentvault and your listing shows a verified maintainer badge.
Sign in first, so the claim is yours. Then prove you control app.incidentvault.com with a DNS record or a file on the site. You don't need GitHub for this.