Build ts CLI binary for tagged releases

[ChristianPavilonis]

Description

We should build the ts binary from crates/trusted-server-cli as part of a tag release.

When cutting a release for a specific tag (for example vX.Y.Z), add release packaging steps to produce and attach the host-target ts CLI artifact.

Acceptance criteria:

• The release flow for a tag produces a ts binary artifact.
• The artifact is downloadable from the GitHub Release.
• The release process documents or enforces the intended target architectures.