Check integrity of gitian input source tarballs

sha256sum verification of source tarballs during gitian build.  This follows the earlier example in boost-win32.yml.  This does not change anything about the gitian outputs.

**Test Plan**
* Search for multiple copies of the tarball and download them from multiple distros.  Confirm that they match the sha256sum's in this commit.