add mirror README documenting files, SHA256s, upstream sources, licenses, and verification

75754f7

verified