Verifies Maven SHA1 hashes against a known list to deter dependency-chain attack vectors