fix: use npm publish so the auth token actually gets used (#43)

fix: use npm publish so the auth token actually gets used (#43) #642