Publish a public artifact portal: anonymous /explore install commands
A partner runs npm install against the registry you sent and gets 401—the private repo needs a token, and you will not hand them a Deploy Token. A zip over chat unblocks them once, but there is no ver