Puppet's digest_algorithm setting defaults to md5, which is outdated. Switch to sha256 in puppet 7. This will affect the default file checksum type and file bucketing. We need to make sure old agents can update to puppet 7, which may require disabling remote file buckets in the puppet_agent module.