I’ve developed an extension to be used by my organization and have already hosted the files such that the signed .crx file can be accessed/downloaded with the appropriate http content-type header.