Verify checksum of downloaded version archive

[firewave]

Description:
After the download of the version archive it should verify the checksum of the file against the provided hashes.sha256 for the release in question.

Justification:
This ensures that the downloaded file is the actually intended one.

Are you willing to submit a PR?

[aparnajyothi-y]

Hello @firewave, Thank you for creating this issue and we will get back to you once we have some feedback on this :)