pull: Verify checksums from static deltas unless gpg signed summary
pull: Verify checksums from static deltas unless gpg signed summary

Otherwise untrusted repos can lie about the commit ids.

gatispaeglis/ostree,GNOME/ostree,GNOME/ostree,gatispaeglis/ostree,GNOME/ostree,gatispaeglis/ostree,gatispaeglis/ostree,GNOME/ostree,gatispaeglis/ostree,GNOME/ostree,gatispaeglis/ostree