Run md5sum checks on cached tarballs #179

We have a cache of source tarballs in /data/src/ which is checked by jobs before downloading. However, we don't check whether these tarballs are the same file compared to the remote ones. We should run md5sum checks on them and if they differ, update the cache.