Add packages checksums to digest file.
Use checksums for repo update.
Fix processing by striping trailing \n.
Fix pkg-ssh.

Passed fd is a descriptor of opened directory. Therefore, we skip all
further checks and just use openat/fstatat. This might be insecure if
capsicum is not enabled.
Fix some issues with pkg-ssh parsing.
Revert "Fix pkg-ssh."

This reverts commit 855159cdd43d50543cf0c6365ea8ea5f825aad45.
Restore the fix partially.
Fix capsicum-less version of pkg-ssh.
Update to pre-alpha8.
Fix pkg-delete -q

Reported by:	az
pkg-(add|install|upgrade): Respect locked packages on forced invocation.

This re-establishes pkg 1.2 behaviour.