fix(publish): pass the tarball as a path, and make the label one-shot

fix(publish): pass the tarball as a path, and make the label one-shot #267