Add MD5 checking and put valid, authenticated MD5 hashes in tools.json

[jackcasey]

For more security and ease of trust. (if someone can easily independently verify the MD5's in tools.json and verify the code in coldsuite.rb then they should feel comfortable.)