PEP 458: remove Windows line endings
Split PEP 458 into two distinct PEPs

PEP 458 now focuses on content security (rather than the current
transport-only security) between PyPI and end users.

PEP 480 builds on PEP 458 to also provide end-to-end security
that can fully handle a compromise of PyPI.