Build wasm before release gate

**Describe the bug**

Right now it builds after the release gate, mostly because that was the easiest way to do it.

Instead, we should have a separate build job that happens before the release gate with artifacts uploaded (the `pkg` dir). Then we publish after the release step.

**To Reproduce**



**Expected behavior**