ci: Split checks into separate jobs and do not rely on script anymore.

While a script as pre-commit hook is convenient it is not flexible enough to account for several CI stages.
Split all checks into separate jobs and add them to the check stage.
Split cargo deny call into job and add to test stage (run after build).
Add all check jobs to publish job as requirement.