Have CI - [ ] compare provided commit hash against GitHub repo tag - [ ] create a comment linking the tagged repo URL and Thunderstore download link - [ ] extract Thunderstore zip to check for trivial zip bomb? - [ ] ???