Now that snapshot builds are only publishing SHA-256 checksums, it makes sense to ship an appropriate utility for verification. Signed-off-by: Jo-Philipp Wich <jo@mein.io>