Allows us to embed the content checksum in the asset URLs, to avoid caching issues. We also add SRI while we're at it.
