[$] Eliminating long-lived credentials with trusted publishing

Trusted publishing uses short-lived credentials to reduce supply-chain risk when publishing to package registries. At the 2026 Open Source Summit North America, Mike Fiedler explained its purpose and operation and argued for adoption, noting it helps prevent theft of long-lived publishing credentials but is not a complete defense.