Ensure (if possible) that changelog and version match the version being released/built

[aldur]

Would it be possible to ensure that building a release fails if this hasn't been updated?
We might want to override this check in some cases (eg when building from a branch), but I'd like to avoid that we forget updating this when doing releases.

Originally posted by @aldur in #5399 (comment)