Verify checksums of `geckodriver` and Maven

[basil]

The curl commands in the Dockerfile that download geckodriver and Maven download these tools without verifying their checksums as in https://github.com/jenkinsci/docker/pull/1868, meaning that a truncated download or corrupted file could result in an execution failure later on. Better to verify the checksum immediately and fail fast in that case.