The proper way isn't to specify artifact checksum?
When you rebuild your "main", you update the checksum and Nomad should see it as a change, no?
I can't test right now, I don't know if Nomad pick the job change and download the new artifact or just fail the check.