atile should expose more library parts #5

Right now its publishing assumes that it has an app password and is reusing its own login, but that means it can't just be reused in a web context where the user has an OAuth login. Should be extracted. (See Blastile.)