fix: Ensure task outputs are sorted prior to hashing (#2430)
* use lockfile key and version instead of package name and version for external deps hash
* ensure task outputs are sorted prior to hashing
* add test for task output hashing and sorting
* Update hashes.