wasm-bindgen-cli should be in Cargo.lock file, not downloaded separately — the current setup makes reproducible OSS builds impossible

There is no other way for distro packagers to get source code for that tool. It must match the exact version of wasm-bingen crate that is used as a dependency of bitwarden-sdk-internal, therefore it cannot be installed as a systemwide binary.