1.0.1

ci(release): pass --publish never to electron-builder

Tag pushes triggered electron-builder's built-in publish which tries to
create a GitHub release using GH_TOKEN. We don't set that (and wouldn't
want two publishers racing — softprops/action-gh-release in the next
step is the single publisher). Explicit --publish never keeps electron-
builder scoped to packaging only.