Fix URL and Sha

Using /tarball/ makes the SHA unpredictable due to name depending on
commit. Using /archive/ gets rid of the problem, and allows predictable
SHA :)