Check hashes and tags on each build invocation
To avoid build mismatches due to partial rebuilds with new inputs, the verify-tags.sh script should also verify that any hash-only authenticated inputs are also up to date and consistent with the versions file prior to gbuild invocation.