Integrity not ensured

Hey, thanks for making this bot!

I'm currently working on a bot that has the same purpose (but written in Rust for practice) so I was looking around for already existing solutions. The problem that I'm facing and that seems to also be prevalent in this bot is that the actual integrity of the verification is not ensured. It's possible for a user to just copy the verification link and let another user, who is a contributor, to do the verification for them since there's no direct communication between discord & github.

Not sure if you've already been aware of this or if I just didn't see your solution to this problem within the source code.

Start by tracing the verification flow in the source and the points where Discord users are linked to GitHub contributors. Define the verification requirements and inspect how the current flow handles a copied verification link; done means the flow reliably proves control of the same user in both systems.

Written by the indexing model from the issue text.