Who is gonna make sure that what I put in github is exactly what I am pushing to the store.

reproducible builds, ideally. f-droid supports this.