kit v0.14.1: accept npm checksum key in validate Fixes verify-registry rejecting applied npm tools (0.14.0 regression).