NX-620: Small fix, publish downstream SHA1 always

Even if original MD does not contain it. OTOH, no idea
does NPM makes use of it at all or not.
NX-620: Be able to shut down NPM MD service

For some requests. Most notably, without this proxyCacheExpiration
is broken, as Walker explodes on walking from root to expire
caches.