Add a consistency check that compares release artifact files & version number and files at a release commit

[jenstroeger]

For context, please refer to issue getmoto/moto#7908

I used Macaron v0.11.0 to analyze the Moto package v5.0.11 and noticed that Macaron doesn’t alert me to the version inconsistency reported in the above issue. The JSON report is here: moto.json

It’d be useful if Macaron had a check that would alert me if the published artifact files are different than the files checked into the repository at the release commit. In this particular case of Moto, I suspect the difference might be only in the declared version, but other packages might sneak other changes into the published artifact…