Extend `appcast` stanza to support multiple keys

- `:sha256`
- `:format` (default is `:sparkle`)
- `:latest_version` (experimental, may be removed)
tests for `appcast` stanza