Remove the per-PR CLI version bump gate

The release pipeline already refuses to move an existing tag and refuses to
republish a version pinning different digests, so requiring every PR that
touches the package to bump cli/package.json only added friction. Bump the
version when cutting a release instead.