Torbrowser updates are verified through the Tor consensus
Torbrowser's updater checks the Tor consensus to see whether Torbrowser's current version is recommended. If not, the updater gets updates from a location described in the consensus, and verifies downloaded updates against a hash provided in the consensus.
To upload designs, you'll need to enable LFS and have an admin enable hashed storage. More information