Update package descriptor file with hashed image and filenames