Use correct hash for latest core (note: tree hash, not commit hash)

Otherwise some files are not whitelisted properly, like: modules / simpletest / tests / themes / test_theme / templates / node--1.tpl.php -- which triggers false alarm.