That’s exactly what my currently-a-plugin-but-feels-awkward does… preference goes to the first email address returned by GitHub that passes the EmailValidator check.
I’ll spend a teeny bit more time seeing if I can’t find a way to make this a plugin that simply co-opts the existing GitHub after_authenticate step, but if I can’t figure that out I’ll just make it a PR on discourse proper.
Thanks!