package/debian: Handle extra sha1 sum in source package metadata
Some debian source package metadata have extra sha1 sums for their
files, for instance those from the ubuntu hirsute suite.
So add an optional sha1 field in DebianFileMetadata model in order
to avoid loading errors.
Related to T2400