Add check_sdist job to validate source wheels and fix nanobind submodule contents in source wheel (recursive clone option was missing). closes #485#490