opentracker: added sha1 hash for libowfat

Also verified GPG signature via::
    $ gpg --verify libowfat-0.28.tar.bz2.sig libowfat-0.28.tar.bz2