Disable updating Torbutton and Torlauncher explicitly
TBB updates all extensions by default. TBB still need to update HTTPS Everywhere or Noscript (questioned by #10498 (moved)) probably, but it should to prevent updating extensions that out of developers control. Someday AMO can to release all IDs for deleted extensions, and somebody will occupy it. Then TBB will be fully controlled on update by them.
To upload designs, you'll need to enable LFS and have an admin enable hashed storage. More information