Software publishing is moving beyond long-lived tokensPackage registries are replacing reusable CI secrets with workload identity, short-lived credentials, provenance, and staged approval.Jul 21, 2026·22 min read·4