Post #1889287

@meejah @sethmlarson The overall concepts are detailed here: https://docs.pypi.org/trusted-publishers/ TL,DR: using OIDC to generate short-lived access tokens to publish from known publishers, instead of holding on to long-lived API Tokens