package/debian: Handle missing md5sum in source package metadata

Some debian source package metadata are missing md5 sums for their
files, for instance those from the buster-proposed-updates suite.

So turn the md5sum field from DebianFileMetadata model optional
in order to avoid loading errors.

Related to T3547