Software publishing is moving beyond long-lived tokens

Publishing software used to depend on a secret. A maintainer created an API token in a package registry, copied it into a CI secret store, and allowed a workflow to use it every time a release was pub