verify-checksums.sh: support file paths with spaces

An example offender:
~/.m2/repository/org/codehaus/mojo/tidy-maven-plugin/1.0-beta-1-SNAPSHOT/maven-metadata-Codehaus Snapshots.xml