fix(controller): clean up publish_release params

Publishing a release should only know about a source, a dictionary of
configuration, and a target.