CI/CD artifact publishing best practices: connecting Jenkins and GitLab CI to a private repository

From token management and least privilege to pipeline publishing examples for Maven, Docker, and npm — plus chaining post-publish scanning and gating with Webhooks.