Use CI to enforce that go.mod and remote plugins are synced

[jzelinskie]

In the ideal case, we want the Go dependencies to match the versions used for the buf remote plugins to generate code.