Makefile: set SHELL

publish target uses things that are bash-specific