Track local files and patches

Background

When using local files or patches there is currently no option to track them with a SHA, so they may be changed locally without alerting the user. Allowing tracking with a SHA would be useful for reproducible builds, and make things more secure.

Task description

• Implement tracking of local files and patches

Acceptance Criteria

Local files and patches can be tracked just like those from a remote source.