People who write font license agreements are not entirely morons. It's pretty clear what is and isn't allowed! https://processtypefoundry.com/help/base/webfont-license-agr...

I don't host w/ github pages, but when I was looking I don't remember there being any restriction on the repo being private. Why does the repo need to be public?

As Steve Jobs would have said, "Boom!" Perfect example!