Object Service uploads include a sha, and Object Service downloads verify the sha.
When all of our FirefoxCI cluster release tasks are using the Object Service (and require it) then let's deprecate the CoT artifact's artifacts block and additional sha verification in CoT verify.