test: enforce release version mapping

[yaojingang]

Summary

• add a single release-version mapping check for Composer, package metadata, runtime config, and the published tag
• add composer version:check for local and CI verification
• use an explicit development fallback when no release version is configured

Verification

• composer validate --strict --no-check-publish
• php artisan test --compact tests/Unit/ReleaseVersionMappingTest.php tests/Unit/SecurityReleaseMetadataTest.php (6 passed, 45 assertions)