ci: consolidate release and CI workflows

- Merge release workflow into ci-cargo.yml to ensure CI passes before release.

- Add needs: build_and_test to build and release jobs.

Author: SamuelMarks

.github/workflows/ci-cargo.yml

@@ -1,12 +1,15 @@
-name: CI
+name: CI & Release
 
 on:
   push:
-    branches: [ "master" ]
+    branches: [ "master", "main" ]
     tags:
-      - 'v*'
+      - '*'
   pull_request:
-    branches: [ "master" ]
+    branches: [ "master", "main" ]
+
+permissions:
+  contents: write
 
 env:
   CARGO_TERM_COLOR: always
@@ -72,9 +75,86 @@ jobs:
         # Ignoring fail under 100 for now as current codebase might not be 100%
         run: cargo tarpaulin --workspace --out Xml
 
-      - name: Upload artifacts (if tag)
-        if: startsWith(github.ref, 'refs/tags/v')
+  build-native:
+    needs: build_and_test
+    if: github.event_name == 'push'
+    strategy:
+      matrix:
+        include:
+          - os: ubuntu-latest
+            target: x86_64-unknown-linux-gnu
+            artifact_name: cdd-rust-x86_64-unknown-linux-gnu
+          - os: macos-latest
+            target: aarch64-apple-darwin
+            artifact_name: cdd-rust-aarch64-apple-darwin
+    runs-on: ${{ matrix.os }}
+    steps:
+      - uses: actions/checkout@v6
+      - name: Install Rust
+        uses: dtolnay/rust-toolchain@stable
+        with:
+          targets: ${{ matrix.target }}
+      - name: Build Native
+        run: |
+          cargo build --release -p cdd-cli --target ${{ matrix.target }}
+          cp target/${{ matrix.target }}/release/cdd-rust ${{ matrix.artifact_name }} || cp target/release/cdd-rust ${{ matrix.artifact_name }}
+      - name: Upload Artifact
+        uses: actions/upload-artifact@v4
+        with:
+          name: ${{ matrix.artifact_name }}
+          path: ${{ matrix.artifact_name }}
+
+  build-wasm:
+    needs: build_and_test
+    if: github.event_name == 'push'
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v6
+      - name: Install Rust
+        uses: dtolnay/rust-toolchain@stable
+        with:
+          targets: wasm32-wasip1
+      - name: Install binaryen
+        run: |
+          wget -qO- https://github.com/WebAssembly/binaryen/releases/download/version_129/binaryen-version_129-x86_64-linux.tar.gz | tar xvz
+          echo "$PWD/binaryen-version_129/bin" >> $GITHUB_PATH
+      - name: Build WASM
+        run: |
+          make build_wasm
+          cp target/wasm32-wasip1/release/*.wasm cdd-rust.wasm || true
+          # Optimize if present
+          if [ -f "cdd-rust.wasm" ]; then
+            wasm-opt -O3 cdd-rust.wasm -o cdd-rust.wasm || true
+          fi
+      - name: Upload Artifact
+        uses: actions/upload-artifact@v4
+        with:
+          name: cdd-rust.wasm
+          path: cdd-rust.wasm
+
+  release:
+    needs: [build-native, build-wasm]
+    if: github.event_name == 'push'
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v6
+      - name: Update latest tag
+        if: github.ref == 'refs/heads/master' || github.ref == 'refs/heads/main'
+        run: |
+          git config user.name "github-actions"
+          git config user.email "github-actions@github.com"
+          git tag -f latest
+          git push origin -f latest
+      
+      - name: Download Artifacts
+        uses: actions/download-artifact@v4
+        with:
+          path: artifacts
+          merge-multiple: true
+
+      - name: Release Artifacts
         uses: softprops/action-gh-release@v2
         with:
-          files: |
-            target/release/cdd-rust
+          tag_name: ${{ startsWith(github.ref, 'refs/tags/') && github.ref_name || 'latest' }}
+          files: artifacts/*
+          prerelease: ${{ !startsWith(github.ref, 'refs/tags/') }}