Add checksum file creation to releases:

This makes it safer for users to consume
Hook tarballs.

Signed-off-by: Jacob Weinstock <jakobweinstock@gmail.com>

.github/workflows/ci.yaml

@@ -62,6 +62,11 @@ jobs:
         with:
           name: hook-${{steps.commitid.outputs.short}}
           path: out/${{steps.commitid.outputs.short}}/rel/hook_*.tar.gz
+
+      - uses: actions/upload-artifact@v3
+        with:
+          name: hook-${{steps.commitid.outputs.short}}
+          path: out/${{steps.commitid.outputs.short}}/rel/checksum.txt
 
   publish-release-latest:
     runs-on: ubuntu-20.04
@@ -106,12 +111,20 @@ jobs:
           tag: latest
           message: "Latest development build"
 
+      - name: Generate checksum
+        uses: jmgilman/actions-generate-checksum@v1
+        with:
+          method: sha512
+          patterns: hook_*.tar.gz
+
       - name: Update latest release
         uses: softprops/action-gh-release@v1
         with:
           name: Hook Latest Development Build
           body: ${{env.RELEASE_NOTES}}
-          files: hook_*.tar.gz
+          files: |
+            hook_*.tar.gz
+            checksum.txt
           prerelease: true
           tag_name: latest
 
@@ -139,8 +152,16 @@ jobs:
         env:
           GITHUB_TOKEN: ${{secrets.GITHUB_TOKEN}}
 
+      - name: Generate checksum
+        uses: jmgilman/actions-generate-checksum@v1
+        with:
+          method: sha512
+          patterns: hook_*.tar.gz
+
       - name: Update latest release
         uses: softprops/action-gh-release@v1
         with:
           body: ${{env.RELEASE_NOTES}}
-          files: hook_*.tar.gz
+          files: |
+            hook_*.tar.gz
+            checksum.txt