include sha's readable-stream optional dep

Fix #3698