Verify various version related assumptions during CI

[pelletier2017]

Adds the following assertions to CI steps

• operator controller is using current version of webhook docker image
• changes to operator require a version bump
• changes to minimal-app require a version bump
• changes to webhook require a version bump
• operator uses "latest" version of webhook rather than static tag. minimal-app latest tag is pushed on release

Hero:

• job showing error when operator doesnt use latest webhook image https://github.com/OctoConsulting/keip/actions/runs/10322165629/job/28576768899?pr=20
• job showing operator version not bumped https://github.com/OctoConsulting/keip/actions/runs/10322106992/job/28576556881
• job showing webhook version not bumped https://github.com/OctoConsulting/keip/actions/runs/10322106982/job/28576556852
• job showing minimal-app version not bumped https://github.com/OctoConsulting/keip/actions/runs/10322107000/job/28576556832
• jobs testing releases work https://github.com/OctoConsulting/keip/actions/runs/10322470769/job/28577767298?pr=20, https://github.com/OctoConsulting/keip/actions/runs/10322470781/job/28577765729?pr=20, https://github.com/OctoConsulting/keip/actions/runs/10322470780/job/28577769066?pr=20
• jobs showing passing state (jobs attached to PR)