verifyOnCheck

Whether check depends on the verify task. false by default, so goldens recorded on a CI runner don't redden ./gradlew build on a dev machine with different fonts.

Passing -Pviddik.verify on the command line turns it on regardless — that's how CI opts in without the build script having to know it's CI.