CI: add a version check before pushing to pypi

[tshirtman]

it shouldn't be too hard to check that the version matches the expected regex before pushing to pypi, to avoid issues similar to #529. failing the build rather than uploading a partial set of files.