fix(publish): deprecate CLI token

[omskscream]

What does this PR try to resolve?

Came up in #15274 to avoid putting tokens into a shell history for publish command.
Implemented similar to #15057

This PR deprecates the optional argument in cargo publish, meaning:

• Remove the mention of the argument from cargo publish help text and doc.
• Give a warning when the argument is used

   `cargo publish --token <token>` is deprecated in favor of reading `<token>` from stdin.
  

• add an stdin read for token of the argument is missing

[rustbot]

r? @epage

rustbot has assigned @epage.
They will have a look at your PR within the next two weeks and either review your PR or reassign to another reviewer.

Use r? to explicitly pick a reviewer

[epage]

There are two changes here

• Read tokens from stdin
• Deprecate --token

Ideally this would be structured as at least two commits. More likely, these should be separate PRs to get the appropriate level of attention to each.

[omskscream]

Thanks for the comment! Valid point, I thought about separate PRs too. I'll close this one and will recreate changes in separate pull requests.