Carry SHA-256 hashes for the source zip, MSI, and setup EXE into release_digests.json while retaining prior release entries. Co-authored-by: Cursor <cursoragent@cursor.com>