image: don't use the dev version of TarSum

ping @jlhawn ...

Signed-off-by: Vincent Batts <vbatts@redhat.com>