fix: accept canonical lambda bundles regardless of path order

[aron23]

Summary

• sort lambda names from the release bundle manifest before comparing against the canonical inventory
• add a regression test for the real / ordering case that broke

Testing

• GOTOOLCHAIN=auto go test ./cmd/lesser -count=1
• GOTOOLCHAIN=auto go test ./pkg/releaseassets -count=1