restrict merging to master only for releases (if it isn't already done) When we merge to master, we should deploy to NPM - publicly is ok --- Moved from 6RiverSystems/arch#154 /cc @jbcpollak