[Finishes #63428954] Respects SHAs from config.yml while downloading constituent repos.