extract publishing part as a library: `zapstore/publisher` so it can be used from both zapstore-cli and Zapstore (to publish directly from the app)