WINDUP-243: Port Brad's Archive Hash visitor to windup 2.x

https://issues.jboss.org/browse/WINDUP-243
Isn't this implied when a "Class" based dependency is specified? It has to be in the same phase, doesn't it? Do we need this?