We were only building nupkgs on windows, which meant if a non-windows machine was the last leg to finish, we were writing a blank file to the versions repo. Fix #4399
The checksums are SHA-512 hashes, which users can use to verify file integrity and authenticity.