[backend] support BSXML::frozenlinks, add verifyer
[backend] add experimental frozenlinks support

It can be used to "freeze" project links, i.e. fix the packages
and their srcmd5. Note that this feature may change in the future.