Verify release tag matches crate version

[kitsuyui]

Summary:

• Add a release guard that compares the release tag with Cargo.toml package.version before publishing.
• Exercise the guard in the pull request publish dry-run workflow with a shell test.
• Keep the publish step from running when a release tag and crate version disagree.

Tests:

• git diff --check
• sh -n scripts/*.sh
• go run mvdan.cc/sh/v3/cmd/shfmt@v3.13.1 -d scripts/*.sh
• shellcheck scripts/*.sh
• go run github.com/rhysd/actionlint/cmd/actionlint@v1.7.12 -color
• scripts/test-check-cargo-version-tag.sh
• scripts/check-cargo-version-tag.sh v0.1.2
• typos
• cargo fmt --all -- --check
• cargo check
• cargo clippy --all-targets --all-features -- -D warnings
• cargo test --all-targets --all-features
• cargo build --release --all-features

[github-actions]

Code Metrics Report

	main (9af049c)	#116 (476d7fa)	+/-
Coverage	68.3%	68.3%	0.0%
Code to Test Ratio	1:0.1	1:0.1	0.0
Test Execution Time	44s	4s	-40s

Details

  |                     | main (9af049c) | #116 (476d7fa) | +/-  |
  |---------------------|----------------|----------------|------|
  | Coverage            |          68.3% |          68.3% | 0.0% |
  |   Files             |              4 |              4 |    0 |
  |   Lines             |            550 |            550 |    0 |
  |   Covered           |            376 |            376 |    0 |
  | Code to Test Ratio  |          1:0.1 |          1:0.1 |  0.0 |
  |   Code              |            593 |            593 |    0 |
  |   Test              |             71 |             71 |    0 |
+ | Test Execution Time |            44s |             4s | -40s |

---

Reported by octocov