ci: Add makefile target to verify the local module cache (sourcenetwo…

…rk#775)

- Resolves sourcenetwork#762 

- Introduces a Makefile target that will fail when `go mod verify` reports any changes to module cache, because by default the `go mod verify` command just prints the modules that were tampered with (doesn't fail or return an error).

Makefile

@@ -93,6 +93,21 @@ dev\:start:
 	@$(MAKE) build
 	DEFRA_ENV=dev ./build/defradb start
 
+# Note: In some situations `verify` can modify `go.sum` file, but until a
+#       read-only version is available we have to rely on this.
+# Here are some relevant issues:
+#   - https://github.com/golang/go/issues/31372
+#   - https://github.com/cosmos/cosmos-sdk/issues/4165
+.PHONY: verify
+verify:
+	@if go mod verify | grep -q 'all modules verified'; then \
+		echo "Success!";                                     \
+	else                                                     \
+		echo "Failure:";                                     \
+		go mod verify;                                       \
+		exit 2;                                              \
+	fi;
+
 .PHONY: tidy
 tidy:
 	go mod tidy -go=1.18