Scope down the changes that are merged in through the publish branch

[vreddi]

On the step of merging the publish branch as part of beachball publish currently all the dirty files are part of the push i.e git add .. We only expect beachball to bump the version and update the CHANGELOG so only some files are expected to change and having something like git add . opens the door for any change mistakenly getting checked in.