The FAIR standard (originally created for WordPress and built on AT protocol) would be perfect for distributing agent plugins since it covers everything from versioning, signing, discovery and packaging.
Now the Agent Plugin project is trying really hard to figure this out https://github.com/agentplugins/agent-plugins-spec/discussions