fix: fail closed on release input discovery

scripts/verify-release.ts

@@ -22,6 +22,7 @@ import {
   ROUTE_RUNTIME_CONTRACT,
 } from "../src/features/installed-feature-contracts.ts";
 import { assertMatchesJsonSchema } from "./lib/json-schema.ts";
+import { verifyBuildManifestOutputs } from "./lib/build-manifest-outputs.ts";
 import { verifyReleaseRuntimeCoherence } from "./lib/release-runtime-coherence.ts";
 import { writeValidatedJsonArtifact } from "./lib/validated-json-artifact.ts";
 import { releaseVerificationArtifactSchema } from "./contracts/release-artifacts.ts";
@@ -109,6 +110,7 @@ const actualAssetManifestHash = createHash("sha256")
   .digest("hex");
 
 const artifactMismatches: string[] = [...artifactComparison.mismatches];
+artifactMismatches.push(...(await verifyBuildManifestOutputs(buildManifest)));
 for (const [token, value] of Object.entries(projectReleaseTokens(release))) {
   if (token !== "schemaVersion" && (typeof value !== "string" || value.length === 0)) {
     artifactMismatches.push(`releaseToken:${token}`);