Verify all downloaded files

[DemiMarie]

All files downloaded by the everest script should be cryptographically verified, either using signatures or with known-safe hashes. Additionally, it should be possible to cryptographically verify this repository itself.