create and upload .md5 and .sha1 files for the tarball + create a latest-md5.txt and latest-sha1.txt to make those discoverable