[Fedora-packaging] Review guidelines source checksum algorithm