feat: add checksum in kpm workflow

[NishantBansal2003]

1. Does this PR affect any open issues?(Y/N) and add issue references:

fix #394

• N
• Y

2. What is the scope of this PR (e.g. component or file name):

pkg/client/client.go

3. Provide a description of the PR(e.g. more details, effects, motivations or doc link):

This PR adds a checksum verification step to the kpm workflow to enhance the security and integrity of third-party dependencies. The integration ensures that each package’s checksum is validated during downloading, preventing unauthorized or tampered packages from being incorporated into the project.

• Affects user behaviors
• Contains syntax changes
• Contains variable changes
• Contains experimental features
• Performance regression: Consumes more CPU
• Performance regression: Consumes more Memory
• Other

4. Are there any breaking changes?(Y/N) and describe the breaking changes(e.g. more details, motivations or doc link):

• N
• Y

5. Are there test cases for these changes?(Y/N) select and add more details, references or doc links:

• Unit test
• Integration test
• Benchmark (add benchmark stats below)
• Manual test (add detailed scripts or steps below)
• Other

[NishantBansal2003]

I will address the failing CI after this PR (kcl-lang/modules#243) is merged (mostly resolved on its own) and once I receive reviews on the current checksum integration code design.

[Peefy]

cc @zong-zhe

[NishantBansal2003]

😄 I will update it later in this PR #520

cc: @zong-zhe

[zong-zhe]

Hi @NishantBansal2003 😄

I have tried to test your PR locally, And I think that it needs a feature flag to control the checksum function on and off, because checksum function is a destructive function, it may cause the user's client to not work properly, which is probably the main reason why tests fail in Github Action. You can refer to some of the feature flags implemented here

kpm/pkg/features/features.go

Line 13 in 63bea3a

SupportMVS = "SupportMVS"

, and add a switch to the functionality of your PR.

[coveralls]

Pull Request Test Coverage Report for Build 12010997316

Details

• 22 of 66 (33.33%) changed or added relevant lines in 1 file are covered.
• No unchanged relevant lines lost coverage.
• Overall coverage increased (+0.02%) to 41.211%

---

Changes Missing Coverage	Covered Lines	Changed/Added Lines	%
pkg/client/client.go	22	66	33.33%

Totals
Change from base Build 11969431770:	0.02%
Covered Lines:	3983
Relevant Lines:	9665

---

💛 - Coveralls

[zong-zhe]

LGTM