Add config.vm.box_checksum for box integrity checking

This is a fix for issue #2360.