Use "checksum" not "hash" to reference commit ids

This is what ostree does
update: Remove old deployment and prune
change name on "latest" symlink to "active"