The publish-dev-image step tries to publish an unverified build to the production docker registry, as part of Tool-ducttape work to test things. However, this step has stopped working, as it can't find trusted runner; this might be a recent change upstream by RelEng, stopping publish steps running for non-merged patches?