@jcoglan this thing: docs.pypi.org/trusted-publishe