chore: update verify_rc script to verify tag against tarball

[CTTY]

Which issue does this PR close?

• Closes #.

What changes are included in this PR?

• Updated verify_rc.sh to verify tag against tarball on Apache dev repo

Are these changes tested?

Manually tested against v0.10.0-rc.2, see results in the comment

[CTTY]

This is configurable so release manager can turn it off when verifying the local tag before pushing it to the remote

[CTTY]

This will make dev/release/verify_rc.sh 0.10.0 2 fail on the error below:

diff -r git-tag-archive/apache-iceberg-rust-0.10.0/.github/workflows/bindings_python_ci.yml apache-iceberg-rust-0.10.0/.github/workflows/bindings_python_ci.yml
84a85,94
>       # Linux maturin builds may run inside manylinux Docker, so host Rust caches only help Windows/macOS.
>       - name: Setup Rust toolchain
>         if: runner.os != 'Linux'
>         uses: ./.github/actions/setup-builder
>       - name: Cache Rust artifacts
>         if: runner.os != 'Linux'
>         uses: swatinem/rust-cache@e18b497796c12c097a38f9edb9d0641fb99eee32 # v2
>         with:
>           key: bindings-python
>           save-if: ${{ github.event_name == 'push' && github.ref == 'refs/heads/main' }}
diff -r git-tag-archive/apache-iceberg-rust-0.10.0/CHANGELOG.md apache-iceberg-rust-0.10.0/CHANGELOG.md
266a267,268
> * chore: Update changelog and dependency lists for 0.10.0 by @dannycjones in https://github.com/apache/iceberg-rust/pull/2745
> * chore(ci): Remove '--locked' flag on toml-cli install by @dannycjones in https://github.com/apache/iceberg-rust/pull/2750
Source archive does not match git tag v0.10.0-rc.2.
FAILED: Verify source archive matches git tag v0.10.0-rc.2
Failed to verify release candidate. See /var/folders/3r/b8hzqplj4y1dtv735y6rps5c0000gq/T/iceberg-rust-0.10.0-rc2.XXXXXX.JkIjwCLRJy for details.

[blackmwk]

Thanks @CTTY for this pr!