Creating a new project with trusted publishing

[konstin]

We're publishing a large workspace to crates.io (50+ packages). Currently, we're still using an API token for this, as there's no proper automation yet for adding new crates (and no bulk API for migrating existing crates). This includes both creating a pending publisher to create a new project with trusted publishing (https://docs.pypi.org/trusted-publishers/creating-a-project-through-oidc/) and an API for creating new projects. This would be extremely helpful to move us off having credentials in our CI pipeline.