Publish command should verify the private field before attempting to publish

[kenotron]

The status of a package.json could actually have changed since the change file has been created, so we need to verify this before publishing. We should still do the bumping - just maybe skip the publish of the package for simplicity.