Adding new installation methods increases risk of supply chain exploits
and increases burden of maintainers. Let's put some requirements on what
installation methods to have in the README.md
Our CI runs a fair amount of unaudited third party code. I'd like to
stop using my Personal Access Token until we have had time to security
harden our CI.