Move gradle witness dependency verification into dedicated files

Merged Torsten Grote requested to merge gradle-witness into master

This also adds a script for makes upgrading dependency checksums so much easier

Merge request reports