Matches the PyPI trusted publisher, which is configured with environment
name 'pypi'. The OIDC token must carry the same environment claim.