build: verify the upload instead of assuming it

release-tarball chained its steps with ';', so a failed scp or ssh still
reached the final echo and it announced a publication that had not
happened -- the file was never in the docroot. Every step is now chained
with && and the result is checked over HTTP before anything is claimed:
the URL must respond and the bytes must untar.

Also passes -o ClearAllForwardings=yes, since the i2p port forwards in
the ssh config fail when another session holds them and their noise
buries real errors.

0 files changed, 0 insertions, 0 deletions