downloaded file integrity: use shasum instead of python script

We use buildscripts/sha256.py because OSX doesn't have sha256sum.

But it does have shasum which does the same thing and more.