Add validation of the third-party jars that are included to the release

[vlsi]

The validation skips JMeter jars, and it helps to spot accidental third-party
dependency addition or removal

Sample failure:

* What went wrong:
Execution failed for task ':src:dist:verifyReleaseDependencies'.
> External dependencies differ (you could update src/dist/src/dist/expected_release_jars.csv if you add -PupdateExpectedJars):
    56938605 => 55421535 bytes (-1517070 bytes)
    97 => 98 files (+1)

  +  137455 groovy-jmx-3.0.5.jar
  - 2137455 groovy-sql-3.0.5.jar
  - 1106993 jna-5.0.0.jar
  + 1506993 jna-5.5.0.jar

[vlsi]

@pmouawad , @FSchumacher , it might make dependency updates slightly more complicated, however, I think it would prevent us from adding unexpected dependencies. WDYT?

[FSchumacher]

Sorry for the late reply. I think it will help us to understand our dependencies even better. So, thanks for implementing it.