sanity check in publish.sh to prevent changes to published artefacts

Any line deleted or changed in releases/SHA1SUM is considered an error
because released artefacts must never change or be removed after they
are published.