write a checksum file after downloading and use that when the file exists

When we download an artifact_file, we should write a checksum for that file to the file_cache_path. That way, once a file has been downloaded, we only need to check the written file to ensure the local file hasn't changed - Nexus downloads in particular are affected because we'll no longer need to keep asking the Nexus server for a SHA1.