raco pkg: don't consult GitHub if checksum is given

Also, more consistently propagate a given checksum, which can
happen more through the `pkg-install' export from `pkg/lib'
than through `raco pkg'.

Also, report to the user when consulting GitHub or downloading
a checksum.
racket/draw: fix `in-region?' method of `region%'

Merge to v5.3.4