opkg: add support for SHA256 verification