Securing CI/CD for an open source project, part 3: Credentials, verification, and what’s next — PLINKFEED