Put hash/checksum in stack.yaml.lock to prevent manual updating

### General summary/comments (optional)

We accidentally mangled our lock file when doing a global search/replace of a git hash.

The lock file ended up in a state where the URL didn't match the sha256, but it didn't result in any errors from stack.

### Steps to reproduce

Mangle lock file.

### Expected

I want stack to error next time it read the lock file, and tell me the lock file is corrupted.

### Actual

No error

### Stack version

~~~text
stack --version
Version 2.15.7, Git revision f590e0165b5ab92f5f7f87f8aa55852e1972ee25 x86_64 hpack-0.36.0
~~~

### Method of installation

* Via GHCup

### Platform

Debian Bookworm