Multiple valid sha hotfix

Update the hardening manifest schema and import artifacts stage to allow for a list of valid shas.

Successful pipeline runs:

• sha string
• list of shas
• reversed list of shas

Confirmed failure pipeline runs:

• invalid sha string
• list of invalid shas
• sha not matching pattern
• more than 2 shas provided in list
• sha string in list not matching pattern