That should be fine. Just make sure to set the permissions so only your service account(s) can access it.
Inventory automatically updates all of its Agents. You don't need to push updates to them. Also, those files are always the latest version, so you are correct that you don't need to update the Deploy package.
Also, I recently wrote a blog post that explains my choices further: https://www.pdq.com/blog/installing-the-agent-with-pdq-deploy/