PEP 708 - Extending the Repository API to Mitigate Dependency Confusion Attacks

There’s almost a draft PEP that came out of this discussion.

It would need a slight update to cover this case, but that ought to be simpler than defining a brand new file (and I can’t imagine you’d get away with proposing a new, standard file solely for the overrides needed here).