I read the entire article. My first pass opinion: Hardware Wallet Co's should not even be using hardware that offers a low / fake entropy option to a C Programmer. Use the correct entropy source or your compile fails. There should be no "fallback" option, e.g. yasmarang or whatever.
Seems like Gitlab runner would be a better choice if you need that kind of functionality. Gitlab has good self-hosting support. Keep up the great work and be careful of feature creep. I love that the apps under 10MB right now!