storage: download integrity check

### Do not merge
- [ ] integrity tests

Picking up from #299, where we're implementing integrity checks for uploads.
You mean "before beginning the download" ? Should you fetch the metadata after the download has finished?