fixes #6691, push access to METADATA should not be required for Pkg.publish(). Also check if any changes have been made.