I finally have created an unsigned “release” in my Github repo which I can install via Module Admin and which lists as “Allowlist NG”, so I know what version I’ve installed. 
Mainly this is to avoid that my modification is destroyed by scheduled module updates which would seriously kill my call flows.
I’ll mark this as solved now. Whoever has the same problem and reads this thread, feel free to use my modification. If someone has the knowledge and wants to create an official signed version of this - feel free!