vcs: Print a message when we verify checksum

Checksums make me feel warm and fuzzy.
ostbuild: don't run main.js as a command line script

Variables defined there otherwise poison the global object
instead of a private module object.

https://bugzilla.gnome.org/show_bug.cgi?id=723697