CI: ensure build/test doesn't result in git change

[JssDWt]

This is mostly for changes to Cargo.toml that aren't reflected in the sdk-cli lockfile. Ensuring there's no git diff is a good practice I think.