add(ci): Check that dependencies have all been published to crates.io on release PRs

[arya2]

Motivation

We've mistakenly published a Github release that relies on crates from a git source thrice now, so we want to add a test that runs on release PRs to check that there are no git sources in the Cargo.lock file.

This is a draft PR because the test still needs to be added to CI and run for PRs that have the A-release label.

Solution

• Adds a simple test that searches the Cargo.toml file for "source = "git+".

TODO:

• Add a CI job for the test that runs on PRs with the A-release label

Tests

This was tested with the restore-internal-miner branch to ensure that it panics when there are dependencies being pulled in from git sources.

PR Author's Checklist

• The PR name will make sense to users.
• The solution is tested.
• The PR has a priority label.

PR Reviewer's Checklist

• The PR Author's checklist is complete.
• The PR resolves the issue.

[upbqdn]

Nice one.

[mpguerra]

Do we have an issue for this one? It's ok if not, we don't need to create one

[upbqdn]

We don't.