ci: Verify release tag matches binary version

Author: mufeez-amjad

.github/workflows/release.yml

@@ -17,6 +17,29 @@ jobs:
         with:
           fetch-depth: 0
 
+      - name: Validate tag matches version in main.go
+        run: |
+          # Extract version from main.go
+          VERSION=$(grep -E '^[[:space:]]*version[[:space:]]*=' main.go | sed -E 's/.*"([^"]+)".*/\1/')
+          
+          # Get the tag name (remove refs/tags/ prefix)
+          TAG_NAME=${GITHUB_REF#refs/tags/}
+          
+          # Remove 'v' prefix from tag if present
+          TAG_VERSION=${TAG_NAME#v}
+          
+          echo "Version in main.go: $VERSION"
+          echo "Tag version: $TAG_VERSION"
+          
+          # Compare versions
+          if [ "$VERSION" != "$TAG_VERSION" ]; then
+            echo "ERROR: Tag version ($TAG_VERSION) does not match version in main.go ($VERSION)"
+            echo "Please ensure the tag matches the version defined in main.go"
+            exit 1
+          fi
+          
+          echo "✅ Tag version matches main.go version: $VERSION"
+
       - name: Set up Go 1.23
         uses: actions/setup-go@v4
         with: