script-generator isn't protected by a checksum

[Googulator]

The script-generator utility lies right on the boundary between stage0-posix and live-bootstrap proper. As a result, it's protected by neither stage0's, nor live-bootstrap's checksum mechanism. This needs to be addressed for maximum trust & reproducibility.