sha256 checksum manifest

[xmready]

In the release assets, a signed manifest file containing the sha256 checksums for the asset files (.deb, .rpm, etc.) would give users like myself assurance before deciding to install it on my system. Please consider this simple yet meaningful step in improving user trust. Thanks for your consideration and for developing a cool software.