Use digital signature verification to prevent modification of omni.ja
Since omni.ja is an ordinary zip archive, anyone can easily inject a backdoor into it and redistribute modified version of Tor Browser. So, it's need to use digital signature to prevent modification of both omni.ja files.
To upload designs, you'll need to enable LFS and have an admin enable hashed storage. More information