fix(cli): validate deploy program id keypair match

[fallintoplace]

Summary

• Treat --program-id as an assertion when anchor program deploy also receives --program-keypair.
• Reject mismatched values before RPC, wallet, or deployment work starts.
• Keep the existing explicit error for --program-id without --program-keypair and add focused tests for both cases.

Why

The native deploy path loaded the requested program keypair and then unconditionally used that keypair pubkey as the target program ID. That meant a command with --program-id X --program-keypair Y silently targeted Y, even if the user was expecting X.

Validation

• cargo fmt --package anchor-cli
• cargo test -p anchor-cli program_id
• cargo test -p anchor-cli program::tests::

[vercel]

@fallintoplace is attempting to deploy a commit to the OtterSec Team on Vercel.

A member of the Team first needs to authorize it.