Generate SHA256 signatures for packages
Support both md5 and sha256 checksums for downloads