feat: add commit sha1 in ETag

[kristianlm]

this fits perfectly! you can then:

• see which commit id a particular resource is on
• utilize HTTP caching if someone wants to put your etag in a if-none-match