Save SHA256 of started file downloads

[wolfv]

librepo does this in the xattr (extended attributes of the files) -- however that doesn't work cross-platform. Instead, maybe we can add this info at the beginning of the .pdpart file, or in a json file in the same directory or some similar arrangement.