Discovered during flutter/engine#36634 (comment), running gclient verify reports many violations, including that some of the engine DEPS hosts are not in allowed_hosts. Fix all existing violations, and update scripts to run gclient verify in CI before sync to prevent future violations from slipping in.