fetch-assets: test all downloaded files with zstd

[lazka]

Test them before moving them to the final location. This makes the download fail if there is some file corruption etc.

This adds a dependency on the zstd exectuable for the fetch-assets command.

Motivated by https://github.com/msys2/msys2-main-server/issues/42

[lazka]

81 would also help there