I'm not quite sure on the exact policies which let you deploy the the updated versions only manually, but have you already looked into ClickOnce deployment? You would be able to update all addins centrally:
As far as I know ClickOnce can also be used from a network share, but I've never tested this by myself: