My thoughts are to iust enable the bridge on repos that already voluntarily signaled a nip34 repo annoucement. There should be an easy clear way for them to opt out of the bridge (weird decision, if they already enabled nip34 but ok, won't blame them). After that, we can think of how to do better spam prevention (only mirror "qualityx npubs, etc).