This sounds and looks great! Definitely looking forward to private and versioned models.
Curious why you chose to go with git-lfs over dvc 3? And, will this change mean git-lfs is an added requirement for publishing and downloading models?