fix: specify --repo when calling gh

[bolinfest]

Often, gh infers --repo when it is run from a Git clone, but our publish-npm step is designed to avoid the overhead of cloning the repo, so add the --repo option explicitly to fix things.