Switch to Digest::SHA from Digest::SHA1 to appease Debian

See https://bugs.launchpad.net/ubuntu/+source/libdigest-sha1-perl/+bug/993648.

The Makefile.PL now actually declares the dependency too instead of
(presumably) relying on implicit dep.
Releng for 0.15