I've been doing uvx twine upload dist/* instead of uv publish because twine gives you a nice prompt for token and you don't have to worry about leaking a credential into shell history or something. Maybe this is something uv publish could also do?