switch to cryptohash because os-library dependencies break hackage documentation generation; this also breaks existing storage, so minor version bump