Where an artifact repository fits in build, release, and install

Cache external dependencies, publish to one hosted repository, give pipelines their own tokens, and block downloads by severity.