moved ContentSignatureCalculator out of httpsig-java and into crx-content-package-deployer