Publish: Detect missing manifest in remote sources (#595)

This could escape our checks when the alire.toml file was in .gitignore, for
example, so we didn't detect the discrepancy between local and remote sources.