package-server: Compute MD5 only for new or edited packages

Refs #2327