ci: publish to npm on merge to main, not on tag push

Compares local version to npm registry version and only publishes when
bumped. Also creates a GitHub release for new versions.