Allow setting sha256sum as norec

When setting the sha256sum option for an input_file of type project, we usually want to set it as norec (otherwise it recursively gets used for all dependencies).