As each release artifact info for a CPAN module provided as loader argument
is guaranteed to contain the sha256 checksum of the associated archive to
download (as the CPAN lister discards artifacts with no checksum info),
we can use that checksum as extid.
It enables to avoid downloading and processing a release archive if it has
already been archived by Software Heritage.
Related to T2833