Automate deployment to package registry
This MR automates the deployment process to use the package registry instead of having semgrep do a git pull.
This simplifies rule changes as now we no longer need to run ./ci/deploy.sh and worry about release collisions. The dist/ sast files are still created in the same way but zipped and pushed to the package registry.