Small release workflow fixes

[jprochazk]

What

• reusable_build_and_publish_web.yml was not setting up correct version of gcloud sdk, resulting in gsutil not being authenticated, because it used an ancient GHA runner pre-installed version that did not yet support WIF
• The post-release version bump step now bumps according to the latest published version, as opposed to bumping on top of what we just released. This means:
  • If we publish 0.9.1, and that is the latest published version according to semver ordering, then it will bump to 0.10.0-alpha.1+dev
  • If we publish 0.9.1, and that is not the latest published version according to semver ordering, because we previously published 0.10.0-alpha.5, then it will bump to 0.10.0-alpha.6+dev.
  • If we publish 0.10.0-alpha.1, and that is the latest published version according to semver ordering, then it will bump to 0.10.0-alpha.2+dev.
• The version bump code would fail on taplo check, so now we do taplo fmt before committing the bumped version.

Checklist

• I have read and agree to Contributor Guide and the Code of Conduct
• I've included a screenshot or gif (if applicable)
• I have tested demo.rerun.io (if applicable)
• The PR title and labels are set such as to maximize their usefulness for the next release's CHANGELOG

• PR Build Summary
• Docs preview
• Examples preview
• Recent benchmark results
• Wasm size tracking