create MD5 checksum of update site ZIP to allow downstream builds to
determine whether update site has changed