ci(tests): build the auth and profile bindings before the test run

`pnpm run test` now reaches the @cipherstash/auth and
@cipherstash/profile vitest suites, which load the napi module. Their
`test` scripts do not build it, and nothing else in run-tests does, so
profile-store.test.ts failed with "Failed to load native binding for
linux-x64" on this PR (Run Tests, Node 22 and 24).

run-tests now builds both bindings with `build:debug` after the
protect-ffi binding, before the test steps. The previous commit has
`build:debug` write its typings to the committed native.d.ts, so the
build leaves the tree clean. This step and that fix came from the CI
port (#1003); they land here because this PR merges first and has to
pass on its own.

Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01PaY5xYydZUWhv8Nex9Sw8a

Author: auxesis

.github/workflows/tests.yml

@@ -136,6 +136,15 @@ jobs:
       - name: Build the protect-ffi binding
         uses: ./.github/actions/build-ffi-binding
 
+      # `pnpm run test` below also runs the @cipherstash/auth and
+      # @cipherstash/profile vitest suites, which load the napi module. Their
+      # `test` scripts do not build it, so cargo stays off the default `test`
+      # path; this step builds it, as the protect-ffi step above does for
+      # `index.node`. Each `build:debug` writes its typings to the committed
+      # `native.d.ts`, so the build leaves the tree clean.
+      - name: Build the auth and profile node bindings
+        run: pnpm --filter @cipherstash/auth --filter @cipherstash/profile run build:debug
+
       - name: Type tests (stack)
         run: pnpm exec turbo run test:types --filter @cipherstash/stack