add where tool to display the location in which datastes are installed
validate observed SHA1 against expected SHA1 from recipe.
 force a list for simplicity
cleaned up examples.
Merge branch 'master' of https://github.com/arq5x/ggd