Use product.commit as filename for cached data

This would help in cases like https://github.com/Microsoft/vscode/issues/23841: Instead of trusting the script engine to bail out for cache misses, we just invalidate the cache when we see the commit hash being different.