It probably makes sense to sprinkle some debug logging into this crate, since Trusted Publishing and other OIDC flows can be hard/annoying to debug.