port `check-constracts` script and add corresponding checking in `lint`

[willieyz]

Originally posted by @mkannwischer in #413 (review)

• During the Porting feature #1108 and #905 from mlkem-native to mldsa-native #413, we identified the following gaps compared to mlkem-native:
• port check-constracts script and add corresponding checking in lint