chore(ci): validate patch files in ci

Author: not-matthias

.github/workflows/ci.yml

@@ -6,6 +6,24 @@ on:
   workflow_dispatch:
 
 jobs:
+  verify-patch-files:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+        with:
+          submodules: true
+      - uses: actions/setup-go@v5
+      - name: Run update-patch.sh and verify no diffs
+        run: |
+          cd go-runner/overlay
+          ./update-patch.sh
+
+          if ! git diff --exit-code . > /dev/null 2>&1; then
+            echo "Patch files are out of date. Run './go-runner/overlay/update-patch.sh' locally and commit the changes."
+            git diff
+            exit 1
+          fi
+
   lint:
     runs-on: ubuntu-latest
     steps:
@@ -97,6 +115,7 @@ jobs:
     runs-on: ubuntu-latest
     if: always()
     needs:
+      - verify-patch-files
       - lint
       - tests
       - compat-integration-test-walltime