Is there a method to allow side-load of these apps directly into the tenant, or should we temporarily enable access to the SharePoint Store, install the adds-ins and then disable access (assuming that the apps do not require ongoing access to the store).

There is no option available to install Nintex app without access to Microsoft App store