fix(ci): avoid inheriting files from untrusted runners during publish
We need to declare an empty dependencies array for the publish stage, otherwise we are violating the principles of separating public and secure runners by inheriting files and artifacts from the public runners.
Signed-off-by: Levente Polyak anthraxx@archlinux.org