Pip compile check mode

[gotmax23]

Support a custom --check flag to fail if pip-compile made any changes so we can check that that lockfiles are in sync with the input (.in) files on all pushes and PRs.

Then, we can also remove the push trigger from the pip-compile workflows as discussed in https://github.com/ansible/ansible-documentation/pull/1920.