storage: download integrity check

Picking up from #299, where we're implementing integrity checks for uploads.
oopsies