fix: ensure no invalid opcodes in wasm light client binary (#92)

also added a check to ensure that sign-ext opcodes don't find their way
back into the binary.

this also provides a significant improvement to the size of the binary,
from 2.8M to 1.1M (758K to 322K gzipped).

closes #91