publish: Use safe globbing and run xargs with -r on Linux