Move cve and markdown to finish publish
We're quite constrained on resources in publish stage so move these further in pipeline. Also this should make failures in reporting not rollback the entire publish
Backport of !1470 (merged) from master.
We're quite constrained on resources in publish stage so move these further in pipeline. Also this should make failures in reporting not rollback the entire publish
Backport of !1470 (merged) from master.