[stable28] ci: fail psalm when baseline update required

[stable28] ci: fail psalm when baseline update required #2177