ci(release): guard against tag/CMakeLists VERSION drift

Mirrors the same guard added to polymarket-cpp + open-meteo-cpp this
hour. Fails the release job (before publishing) if the tag X.Y.Z
disagrees with the project(...) VERSION field in CMakeLists.txt.

The drift was a real shipped bug in 2 of the 6 sibling SDKs:
polymarket-cpp v0.1.1/v0.1.2/v0.1.3/v0.1.4 and open-meteo-cpp
v0.1.1/v0.1.2 all tagged with the project VERSION still on 0.1.0.
This repo is currently in sync but the same drift could happen on
any future release without the guard.

Author: Reddimus

.github/workflows/release.yml

@@ -22,6 +22,26 @@ jobs:
         with:
           fetch-depth: 0
 
+      - name: Verify tag matches CMakeLists project VERSION
+        # Pin the source-of-truth: the tag X.Y.Z must equal the
+        # `project(ncei-cpp VERSION X.Y.Z ...)` field in
+        # CMakeLists.txt. Without this guard the two can drift
+        # silently and corrupt `find_package(ncei-cpp VERSION
+        # X.Y.Z)` consumer queries (the generated
+        # ncei-cppConfigVersion.cmake tracks PROJECT_VERSION).
+        run: |
+          tag="${GITHUB_REF#refs/tags/}"
+          version="${tag#v}"
+          cmake_version=$(awk -F 'VERSION |LANGUAGES' '
+            /^project\(ncei-cpp / { gsub(/[ \t]/,"",$2); print $2; exit }
+          ' CMakeLists.txt)
+          if [ "$cmake_version" != "$version" ]; then
+            echo "::error::tag $tag implies version '$version' but CMakeLists.txt says '$cmake_version'" >&2
+            echo "Bump 'project(ncei-cpp VERSION ...)' to match before tagging." >&2
+            exit 1
+          fi
+          echo "OK: tag $tag matches CMakeLists VERSION $cmake_version"
+
       - name: Extract release notes from CHANGELOG.md
         run: |
           tag="${GITHUB_REF#refs/tags/}"