docs: list all conformance commits

[dnut]

This adds conformance/commits.env with a commit hash of every repo used for testing sig's conformance with agave.

It's important that these commits are the same commits that we're using in CI. Anyone should be able to easily check out our code and run conformance locally by using these commit hashes, with high confidence that everything will work and be conformant with the code we have on main.

For SOLANA_CONFORMANCE_COMMIT and TEST_VECTORS_COMMIT, I changed the CI to ensure these are always pulled in directly from commits.env and used to check out the actual code used in CI.

For the other commits, this is not possible since the artifacts are pre-generated and not checked out within CI. So I added a basic script to grep files for where these commit hashes are documented or used for other purposes, and set it up to run this verification script in CI. It isn't a foolproof check, but at least it will flag some inconsistencies. The first run detected an inconsistency that we have on main which I fixed in 1434e9d.

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.
see 2 files with indirect coverage changes

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.

[Rexicon226]

Why not just have the circleci use these variables, instead of checking they exist inside of the config? This seems very roundabout to me.