CI - Check that tag matches the CLI version

[bfops]

We have had plenty of times where we have forgotten to bump the version.

TODO

Add a CI check that, for tags like vX.Y.Z-foo, we run the tools/upgrade-version tool for that same X.Y.Z version, and check that there's no git diff

[cloutiertyler]

Part of cargo validate-release