Is there by chance a way to password protect the generated site?
and other worse ways
npx pagecast publish "/absolute/path/report.html" --password "your-password" --json
npx pagecast publish "/absolute/path/report.html" --no-password --json # remove it