Remove 'npm publish -f'

This change uses the 'time' entry to record every version ever
published.  Even if the entire package is unpublished, the time
hash will remain.

Publishing a version that once existed is no longer an option. Even
when doing npm publish --force, now you MUST bump the version between
publishes.

This also makes total doc deletes forbidden.  Even if you delete all the
versions, the time entries persist.