Add a dependency checker for build tools

Currently envoy often gets out of sync with the toolchains and images from build tools

Its also not always clear to people updating build-tools what needs to be updated, but its not so difficult to figure out programmatically

Most simply this could just issue a warning in envoys ci - more helpfully, but with significant added complexity, it could raise an issue or even a PR to fix