monit: update to 5.20, use PKG_HASH