best practice: use hashes in dockerfile

[amiller]

the lightclients docker-compose.yml isn't checking the downloaded files against any hardcoded value