`opam lint --check-upstream` doesn't check `extra-source`

[kit-ty-kate]

Noticed in ocaml/opam-repository#28455 as opam-repo-ci uses opam's API

[rjbou]

Per 2025/09/15 dev meeting: it is certainly something that we want to have.