[enhancement] Add Download Verification check for source tarballs

[adamfarley]

Something went wrong with publishing source tarballs for the Jan 2024 update. See: adoptium/adoptium-support#1003 we should make sure that it's there with some verification for any release.

Originally posted by @jerboaa in adoptium/temurin#28 (comment)

[sxa]

We'll need to think about this a little more - there won't necessarily be one for a point release for example.

I guess we could check for it ONLY if the release contains Linux/x64 ..

[jerboaa]

Consider using the API and verifying that sources can get downloaded for the specific release. E.g. for 21.0.3:

$ curl -v https://api.adoptium.net/v3/binary/latest/21/ga/linux/x64/sources/hotspot/normal/eclipse 2>&1 | grep Location | grep 21.0.3
< Location: https://github.com/adoptium/temurin21-binaries/releases/download/jdk-21.0.3%2B9/OpenJDK21U-jdk-sources_21.0.3_9.tar.gz

This hard-codes x64, but that's fine for this check. It's only published for that arch.