I really recommend to create an own repository for the (s)css resources + fonts, and make it installable via npm and bower.
As it is now, you have to update the files manually, if there is a newer version.
I agree with you. However, to bypass this issue I'm using the Git address syntax for package.json dependencies:
Check the npm docs for more info about it.
This specific SHA points to the v0.1.2 commit
@connors do you have plans to publish Photon on npm?