Move deny-check CI task as the last one, to help real unit tests run

Previously, if deny-check failed - unit tests wouldn't run which is
weird. Sourcehut CI currently doesn't allow later tasks to run despite
a previous failure, so let's try shuffling them around instead.

.build.yml

@@ -8,9 +8,9 @@ tasks:
   - check: |
       cd physis
       cargo check
-  - deny-check: |
-      cd physis
-      cargo deny check
   - test: |
       cd physis
-      cargo test
+      cargo test
+  - deny-check: |
+      cd physis
+      cargo deny check