- temporarily move `publishAlways` to just CI runs until Gradle can clarify how to use that when users are not authenticated; I was originally told that `publishAlways` would simply skip publishing if credentials are not present, but that is clearly not the case