Verify SHASUMS.txt before installing Node #1807

Description

Node signs the SHASUMS256.txt that contains the checksums of each binaries with a PGP signature. The way to verify is explained at https://github.com/nodejs/node#verifying-binaries.
But viteplus does not currently verify that.

This makes it difficult to attack Node.

Suggested solution

Download SHASUMS256.txt.asc instead and verify it here:

Alternative

No response

Additional context

No response

Validations

• Read the Contributing Guidelines.
• Confirm this request is for Vite+ itself and not for Vite, Vitest, tsdown, Rolldown, or Oxc.
• Check that there isn't already an issue requesting the same feature.