Secure Software Supply Chains for Python