storage: download integrity check

### Do not merge
- [ ] integrity tests

Picking up from #299, where we're implementing integrity checks for uploads.
I hadn't seen the comment on headers  when I added my comment, that sounds good.