Artifact Registry — one place every package and image comes from

Go, Python, npm, Maven and Docker on Google Artifact Registry: what we publish and a cache of every upstream, reached by identity rather than keys, with a retention rule that never deletes what is deployed. Roadmap item 32.