workflows: check that the generated CI filters are up-to-date

`make update-ci` is very fast, so we can run it unconditionally.