capistrano: ensure we build the same sha we're deploying