ask build dependency maintainers to get HTTPS and GPG
Contact every project, which is required as a build dependency for Tor related projects (TBB, Tor etc.). If they don't know, briefly explain what Tor does, how many people rely and it (with their lives).
Ask them, if they can start providing HTTPS and GPG.