Store the fingerprint when discrepancy is found

If a repo is updated underneath us and we discover that there is no need
to actually update it, write out the repo fingerprint to make sure this
doesn't repeat itself during the next run.