Generate .sha1 and .md5 for dist files to comply with http://www.apache.org/dev/release-signing.html (.asc still to be manually generated as per http://www.apache.org/dev/release-signing.html#openpgp-ascii-detach-sig)