Move metadata validation to CI build step

katversion needs git, so the validation also needs git.  Move the
metadata validation to the build step, rather than installing git
again in the publish step.  The dist files from the build step are
the ones that get published, so OK to move the check there.