Third party token auth support

[gbaz]

As per haskell/cabal#5064 (comment)

This would allow bots etc to interop better.

One approach (not sure how complicated this would be) could be to add some OAuth stuff, which we could then also use OpenID Connect with to allow openid login to hackage as well.

Moving to tokens rather than full login info for upload also seems... not the worst idea?

[gbaz]

Note, we already have http://hackage.haskell.org/user/[USERNAME]/manage -- but it might be nice to move do a different standard.

However the fact that this exists does tend to mitigate the need for this proposal.

C.f. #541

[ulysses4ever]

Hey @gbaz ! Tokens have been implemented, right? Should this be closed?

[gbaz]

Hrm. i think those are the tokens discussed in the above comment. But if there's no demand for anything more for now, maybe that's enough? Probably should have been closed once we realized they already were there to begin with :-)