cabal-install: update to version 1.18.0.2; fix hackage URL

This worked on my 10.8 system so I think it should fix #22984 and #22995.