You could do some automated/scripted installation VM-image builder thingy and release that. Would probably also save some manual work for you. (bash script fetching install image & run qemu, autounattend.xml, etc. all nicely released on github.) And it’d be auditable.
Not sure if I’d trust an OS named like a Bond villain.