ci: add dry-run publish check to PRs

Runs `deno publish --dry-run` in CI so lockfile mismatches and other
publish issues are caught before merging, not after.

Author: bartlomieju

.github/workflows/ci.yml

@@ -78,3 +78,7 @@ jobs:
       - name: Check links
         if: startsWith(matrix.os, 'ubuntu') && matrix.deno == 'v2.x'
         run: deno task check:links
+
+      - name: Dry-run publish
+        if: startsWith(matrix.os, 'ubuntu') && matrix.deno == 'v2.x'
+        run: deno publish --dry-run