enable/disable trusted publishing, manage repo↔package bindings needs https://github.com/npmx-dev/npmx.dev/issues/38