Consistent formatting for algo-prefixed strings.
    
    We had an inconsistent use of @sha256:abcdefgh and sha256@abcdefgh in a few
    places.  Let's consolidate on the one that looks most like the docker pull spec
    that people are familiar with, which is sha256:abcdefgh.