Fix rebar.config.script check for OTP version

Some new functions were added to the crypto API after
R15B01, but the hmac/3 and hmac/4 functions did not
arrive until R16. Only set new_hash if the OTP version
is R16 or above.
Bump velvet dependency to get r15 support fix
Merge branch 'bugfix/r15-support' into develop