Enforce publish to public registry

This should make sure the package is always pushed to the right destination, no matter what the user's `.npmrc` says.