But these are copyright by Apple so are you allowed to use them on your commercial websites and apps?

Right, these are licensed by Apple for UI use on Apple platforms only. The README has a "Before you use this" callout up top about this. sfsym is an export tool; what you do with the output is on you.