fixes the travis build

Only publishes when on master, which means that pull request builds
will no longer be spuriously failing, because Travis doesn't supply
them with secret values.

Also does away with MAVEN_SETTINGS_ENV and loads credentials from env vars
automatically when all required env vars are set.