validate CoreEval submission in passed proposals against actual passed proposal

[turadg]

Some proposals pull their CoreEval submissions from the web. Some use a subdir on disk.

The subdir is good because it doesn't make CI dependent on network requests to wherever the CoreEval is stored.

But we need some way to validate that they match. It could be manual and also in CI as advisory.

[mhofman]

Note, to pull from a mainnet RPC node itself, the following should work:

agd query gov proposal $PROPOSAL_NUM -o json | jq -r '.content.evals'

Yields the following shape:

[
  {
    "json_permits": "..."
    "js_code": "..."
  }
]