README.md: using image url with specific sha-1