gettor should deliver checksums of our packages

Some people can't fetch the full packages over gmail, because they're too big, because their gmail interactions are throttled, or because their Internet connection sucks too much to fetch 30MB.

We should deliver checksums with the download links with instructions how to compare them (#3893 (moved)). Then they can get their Tor from wherever, and verify it.