kit v0.14.0: npm dist.integrity + yq multi-hash verification