The project account is run by multiple people, most not knowing what Nostr even is. It is also why we don't have NIP-05's because I keep this use mostly to myself and I don't evangelise it or get the wider team involved. I was using Nostr before I was getting involved with GrapheneOS.
It is pretty obvious the bridge isn't the best way to deal with it... having a project Nostr has been put on the drawing board before though. We don't even do Lightning donations yet -- this is my personal page, but I send my LN funds to the project wallets or to V4V by working on other content.
I argue I'm already verified without the git repo... as for proof I can be reached at f1nal:grapheneos.org on Matrix or on the forum. Being the official domain name for GrapheneOS is far more useful.
My forum account is at: https://discuss.grapheneos.org/u/final