Have you considered phone number verification? Both minors and people in non-western countries are a lot more likely to have a phone than a credit card. Not sure how easy it is for fraudsters to get their hands on large quantities of phone numbers though.

I wonder, because Github actions are a thing, Github is likely to be facing the same issue, and is likely to have implemented mitigations already. Maybe you could piggyback on that effort and require Github auth?