docs: better comment for SHA collision