If Publisher.needsToRunAfterFinalized throws an exception, the workspace lease is not released.

Worse, the exception is not even reported anywhere if there was already an exception in the publisher, because Run.handleFatalBuildProblem closed the build log the first time, so the stack trace is lost.