optionnal subresource integrity checks

[pmp-p]

like python/cpython#93953

https://developer.mozilla.org/en-US/docs/Web/Security/Subresource_Integrity

pygbag could have an option to add checksums to generated html to prevent files tampering on cdn