Include SHA1 digest in runtime deps file
Check SHA1 digests after downloading artifacts