Allow configuring "trusted publishing only" config for crates

[Kobzol]

Discussed in https://rust-lang.zulipchat.com/#narrow/channel/242791-t-infra/topic/Trusted.20publishing.20through.20team/with/560399101.

[rustbot]

rust_team_data/src/v1.rs has been modified, it is used (as a git dependency) by multiple sub-projects like triagebot, the www.rust-lang.org website and others.

If you are changing the data structures, please make sure that the changes are not going to break serde deserialization (adding a field is fine; removing or renaming a field isn't).

If you must do a breaking change to the format, make sure to coordinate it with all the users of the rust_team_data crate.

cc @Urgau

[github-actions]

Dry-run check results

[WARN  sync_team] sync-team is running in dry mode, no changes will be applied.
[INFO  sync_team] synchronizing github

[Mark-Simulacrum]

I think once we have support for this we will also need to add support to sync owners, permitting adding only teams (individual owners can remove rust-lang-owner so shouldn't be allowed).

[marcoieni]

The dry run is clean: #2138 (comment)