A module in the publisher that would connect to a git repository and use that database to manage proactive remediation and /or powershell scripts.
To go a little deeper you could make each PR a single git repo with an PAT or ssh Key. The publisher could simply do a git pull and if there is a new master branch it would update the PR in intune. This same concept could be used for CI in sccm as well.