feat: Don't run build script on publish

It's already been run before. We do still need to run pinst, so we do
that manually.

Author: rjmunro

.github/workflows/publish.yaml

@@ -172,8 +172,14 @@ jobs:
           corepack enable
           yarn install
 
+          # Disable postinstall in published release
+          yarn pinst --disable
+
           # Publish from the extracted release (build output present)
-          npm publish --access=public --provenance --tag ${{ needs.prepare.outputs.tag }}
+          npm publish --ignore-scripts --access=public --provenance --tag ${{ needs.prepare.outputs.tag }}
+
+          # Re-enable postinstall after publishing
+          yarn pinst --enable
 
           NEW_VERSION=$(node -p "require('./package.json').version")
           echo "**Published:** $NEW_VERSION" >> $GITHUB_STEP_SUMMARY