Play as a PyPI package maintainer on a mission to publish your latest package using the new trusted publishing method. But first, you must navigate a maze of security challenges including token authentication, identity verification, and GitHub environment configurations. Can you prove your identity and get your package published without falling into the hands of cyber attackers?