NX-620: Support for offsite tarballs

Off-site tarball support.

Notable changes/additions:
* NPM transport for tarballs
* NPM targeted content validation
* cache expiration fixed
* MD expiration fixed (per-document, not root which was already fixed)

Issue
https://issues.sonatype.org/browse/NX-620

CI
http://bamboo.s/browse/NX-NPMF10
does the exception here contain enough detail about the file in question?  If not that file path should be included for reference.