Bug report

Bug description:

We've encountered a number of issues with the published Python assets (either the source archives or GPG signatures) recently:

• Today's Python 3.10.14 source release signed by wrong GPG key #117053
• Python 3.8.20 and 3.9.20 releases missing GPG signatures #123807
• Python 3.12.5 gzipped source tarball download 404s pythondotorg#2499
• Python 3.10.16 release is missing GPG signatures #127601

Is there any way the automation (or else any manual playbooks shorter term) could be improved to prevent these from occurring?

(I realise GPG signatures will likely be removed starting Python 3.14 due to PEP-761, but they are supported for now)

CPython versions tested on:

3.9, 3.10, 3.11, 3.12, 3.13, 3.14, CPython main branch

Operating systems tested on:

Linux