Provide verification of downloaded binaries

Please sign your installation binaries and provide hashes to verify them (provide the hashes on a page served with https)

Please link your download pages to the page containing the verification hashes.

To be nice to users, please provide examples of how to verify the binaries.

Thanks :)

Start by reviewing how installation binaries are published and how download pages are maintained. The requested outcome is signed binaries, verification hashes served over HTTPS, links from download pages, and user-facing verification examples; the issue names no files, tests, or entry points.

Written by the indexing model from the issue text.