Move to puppet-archive in order to support archive checksum validation

[tohuwabohu]

The module should verify the checksum of the downloaded JIRA archive in order to make sure it has not been manipulated. The puppet-archive module provides this functionality. IMHO, no module should download artifacts from external sources without ensuring the file's integrity.

As a workaround, the following code could be used

file { "/opt/staging/jira/atlassian-jira-${version}.tar.gz.sha256":
  content => "${checksum} *atlassian-jira-${version}.tar.gz"
}

exec { "/usr/bin/sha256sum -c atlassian-jira-${version}.tar.gz.sha256":
  cwd         => '/opt/staging/jira',
  refreshonly => true,
  require     => File["/opt/staging/jira/atlassian-jira-${version}.tar.gz.sha256"],
  subscribe   => Staging::File["atlassian-jira-${version}.tar.gz"],
}