Pin bundled binary digests in a lock file and verify signatures at bump time (#2346)