* SSDLC shenanigans...

* publish job depends on the build job

* need Ruby configured to build the native code

* fix regex anchoring (alerted via codeql)

* ignore vendor folder

* apparently we have to specify environment for each job

* see if it picks up jruby this way?

* download all artifacts to the current directory

don't create separate directories for each downloaded artifact.

* authorized-pub task doesn't like globs with spaces in them

* use boolean type for dry-run flag

* don't need to specify "false" explicitly anymore

* simplify the build phase (don't need secure checkout)