Trusted publishing: prevent OIDC credential re-use

[DarkaMaul]

Fixes https://github.com/pypi/warehouse/issues/16194

This PR uses a Redis cache to keep JWT token identifiers in memory until their expiration. It then prevents reusing an already used JWT to mint a new OIDC token.