In the download_file function in src/handlers/download.rs, currently only the integrity verification of the .md5 file is implemented, and there is no recognition or verification logic for the .sha256 file. #82
Description
If only .sha256 is provided, the current implementation will completely skip verification, which does not align with the security objectives.