suggestion: require publishing from CI for packages

[iuioiua]

Currently, you can enable requiring publishing from CI at the scope level. After some internal discussion, it might be worth configuring this option at the package level, too. It'd be nice to have this option auto-enabled for packages that publish via CI. If the user attempts to publish via their local machine, there should be sufficient detail about local publishing being disabled and how to re-enable it.