Releasing Packages with a Valet Key: npm, PyPI, and beyond