verify checksums

wp core has only ten subcommands. Alone, each one does little. The power is in the sequence. Next release? Test it on staging first: wp core download –version=nightly…