move the state package into .salt directory
generate hash for state_pkg and pass it into routine

This allows for the checksum of the state_pkg tarball to be verified in
the target minion routine
Mandate has data in state.pkg
pass hash and hash type into state.pkg