Update package-hashes to default to sha256 gpg