releaser should fail on replace directives

[monopole]

when releasing module foo, if a replace directive is found in the go.mod file, e.g.

replace sigs.k8s.io/kustomize/api v0.0.0 => ../../../api

the release script should fail with a warning message like

• In foo's go.mod, remove replacement of module bar and pin to a specific version of bar.
• This may require first releasing a new version of bar.

Replace directives allow go build and test to work as multiple modules are developed at the same time, but cannot be left in place at release (git tag) time, as go get and go install won't work at the given tag.

cause of #2462

[monopole]

refers to code in https://github.com/kubernetes-sigs/kustomize/tree/master/releasing/releasing

[monopole]

fixed