ECF CI instance use of central rather than ossrh

ECF's CI instance https://ci.eclipse.org/ecf

used to publish to OSSRH via this shell script: https://github.com/eclipse-ecf/ecf/blob/master/maven-central-stage.sh

See line 81:

mvn gpg:sign-and-deploy-file -DrepositoryId=ossrh \
  -Durl=https://ossrh-staging-api.central.sonatype.com/service/local/staging/deploy/maven2/ \
  $props -Dtycho.mode=maven

Notice I've changed the host from oss.sonatype.com to ossrh-staging-api.central.sonatype.com

When I run this script in CI instance, however, there is authentication error:

https://ci.eclipse.org/ecf/job/ecf-github.master.stage-release/35/console Search console output for ERROR:

... [ERROR] Failed to execute goal org.apache.maven.plugins:maven-gpg-plugin:1.6:sign-and-deploy-file (default-cli) on project ecf-parent: Failed to deploy artifacts: Could not transfer artifact org.eclipse.ecf:org.eclipse.ecf.ai.a2a:jar:1.1.0 from/to ossrh (https://ossrh-staging-api.central.sonatype.com/service/local/staging/deploy/maven2/): status code: 401, reason phrase: Unauthorized (401) -> [Help 1]

The configuration for this build job:

https://ci.eclipse.org/ecf/job/ecf-github.master.stage-release/configure

used the secret-subring.asc file for credentials for access to ossrh. This doesn't work for ossrh-staging-api.central.sonatype.com. This is basically the same as what's suggested

https://eclipse-cbi.github.io/cbi-website/jiro/Nexus-Maven-Central/#how-can-artifacts-be-deployed-to-central-portal-maven-central

under Required steps for freestyle job. Nothing that I can find about the ossrh -> central transition wrt credentials, however.

I've created a central/username/password token from the my central login, but I can't figure any way to have those credentials be used via the freestyle script invoke of maven sign-and-deploy-file.