show tos/pp commit sha in ver.json

Fixes GH-1168