Define SHA256 checksum verification process for artifact downloads: - Five verification modes: none, header, stream, pre, strict - Failure detection for hash/size mismatch, S3 errors, truncation - Retry mechanism with exponential backoff - Quarantine process for strict mode failures - Configuration options and client integration examples