Introduce new script that validates the signatures match between the .pyi file and the bridge #9367

	# Jobs that only run for external contributors.
	# These have to be carefully sanitized, we don't want to leak secrets.
	# - We can't use caching, outside of really rare scenarios, because our caching largely depends on GCS
	# - We have to ensure that these jobs _only_ run for PRs outside of the `rerun-io` organization
	# this is done using the following check, added to every job:
	# if: github.event.pull_request.head.repo.owner.login != 'rerun-io'

	name: Pull-Request (Contrib)

	on:
	pull_request:
	types:
	- opened
	- synchronize

	permissions:
	contents: "read"

	jobs:
	checks:
	name: "Checks"
	if: github.event.pull_request.head.repo.owner.login != 'rerun-io'
	uses: ./.github/workflows/contrib_checks.yml
	with:
	CONCURRENCY: pr-${{ github.event.pull_request.number }}
	PR_NUMBER: ${{ github.event.pull_request.number }}

	python:
	name: "Python"
	if: github.event.pull_request.head.repo.owner.login != 'rerun-io'
	uses: ./.github/workflows/contrib_rerun_py.yml
	with:
	CONCURRENCY: pr-${{ github.event.pull_request.number }}
	MATURIN_FEATURE_FLAGS: "--no-default-features --features extension-module"

Provide feedback