Confirm that files and contents of the release tarballs match the git repository

[omajid]

Describe the Bug

We should have a way to confirm that files and contents of the release tarballs match the git repository.

Over in dotnet/sdk#52307 we found that the contents of the git repository and the source tarball differ by missing a .gitattributes file which is a part of the source code of the implementation of the dotnet new gitattributes command.

It might be worth it to create a test or an automation to identify more issues like this in the future before they hit users.

Steps to Reproduce

$ wget https://github.com/dotnet/dotnet/archive/refs/tags/v10.0.102-sb1.tar.gz
$ tar tf v10.0.102-sb1.tar.gz > vmr-files.tarball.list
$ git clone https://github.com/dotnet/dotnet
$ cd dotnet
$ git checkout v10.0.102-sb1
$ git ls-tree -r HEAD --name-only | sort -u > ../vmr-files.repo.list
$ cd ..
$ diff -u <(cat vmr-files.repo.list) <(cat vmr-files.tarball.list | sed 's#^dotnet-10.0.102-sb1/##' | grep -v '/$' )
@@ -119343,7 +119344,6 @@
 src/runtime/src/native/external/zlib-ng/arch/generic/generic_functions.h
 src/runtime/src/native/external/zlib-ng/arch/generic/Makefile.in
 src/runtime/src/native/external/zlib-ng/arch/generic/slide_hash_c.c
-src/runtime/src/native/external/zlib-ng/arch/.gitignore
 src/runtime/src/native/external/zlib-ng/arch/power/adler32_power8.c
 src/runtime/src/native/external/zlib-ng/arch/power/adler32_vmx.c
 src/runtime/src/native/external/zlib-ng/arch/power/chunkset_power8.c
@@ -119464,8 +119464,6 @@
 src/runtime/src/native/external/zlib-ng/FAQ.zlib
 src/runtime/src/native/external/zlib-ng/functable.c
 src/runtime/src/native/external/zlib-ng/functable.h
-src/runtime/src/native/external/zlib-ng/.gitattributes
-src/runtime/src/native/external/zlib-ng/.gitignore
 src/runtime/src/native/external/zlib-ng/gzguts.h
 src/runtime/src/native/external/zlib-ng/gzlib.c
 src/runtime/src/native/external/zlib-ng/gzread.c.in
@@ -149322,7 +149320,6 @@
 src/sdk/template_feed/Microsoft.DotNet.Common.ItemTemplates/content/Enum-VisualBasic/.template.config/localize/templatestrings.zh-Hans.json
 src/sdk/template_feed/Microsoft.DotNet.Common.ItemTemplates/content/Enum-VisualBasic/.template.config/localize/templatestrings.zh-Hant.json
 src/sdk/template_feed/Microsoft.DotNet.Common.ItemTemplates/content/Enum-VisualBasic/.template.config/template.json
-src/sdk/template_feed/Microsoft.DotNet.Common.ItemTemplates/content/Gitattributes/.gitattributes
 src/sdk/template_feed/Microsoft.DotNet.Common.ItemTemplates/content/Gitattributes/.template.config/dotnetcli.host.json
 src/sdk/template_feed/Microsoft.DotNet.Common.ItemTemplates/content/Gitattributes/.template.config/localize/templatestrings.cs.json
 src/sdk/template_feed/Microsoft.DotNet.Common.ItemTemplates/content/Gitattributes/.template.config/localize/templatestrings.de.json
@@ -150084,7 +150081,6 @@
 src/sdk/test/dotnet-MsiInstallation.Tests/WorkloadSetTests2.cs
 src/sdk/test/dotnet-MsiInstallation.Tests/WorkloadSetTestsBase.cs
 src/sdk/test/dotnet-MsiInstallation.Tests/WorkloadSetTests.cs
-src/sdk/test/dotnet-new.IntegrationTests/Approvals/AllCommonItemsCreate.-o#dotnet-gitattributes-file#-n#item.verified/dotnet-gitattributes-file/.gitattributes
 src/sdk/test/dotnet-new.IntegrationTests/Approvals/AllCommonItemsCreate.-o#dotnet-gitattributes-file#-n#item.verified/std-streams/stdout.txt
 src/sdk/test/dotnet-new.IntegrationTests/Approvals/AllCommonItemsCreate.-o#dotnet-gitignore-file#-n#item.verified/dotnet-gitignore-file/.gitignore
 src/sdk/test/dotnet-new.IntegrationTests/Approvals/AllCommonItemsCreate.-o#dotnet-gitignore-file#-n#item.verified/std-streams/stdout.txt

Other Information