fix(packaging): verify complete SQL migration inventory in release archives

[thecompez]

Why

On the live OpenProof host, runtime/migrations is missing 0019_farcaster_profile_seed.sql while later migrations are present. Package scripts copy the source migrations, but previously did not validate the actual outputs.

What

• Verify names and SHA-256 digests of every source SQL migration inside each finished Debian or bundle artifact.
• Fail the respective packaging command when an artifact omits, alters, duplicates, or adds an unexpected migration.
• Add seven independent fixture tests (including simulated Debian tar stream).
• No changes to .github/workflows required: existing CI and release builders already invoke both packaging scripts.

Checks

• Seven regression cases: pass.
• JavaScript SDK tests and OpenAPI coverage: pass.
• Python syntax and staged diff checks: pass.

Safety

• Isolated branch. No production deployment or database writes. This prevents future package drift but does not by itself repair the production runtime: the database migration journal must be inspected read-only before restoring 0019.