build static binaries, makefile fixes, sha1 field fix

- static binary build targets now provided, folks must provide
  their own copies of statically built libz.a and libbz2.a
- moved off of dependency on openssl libs, now using Christophe
  Devine's sha1 code, updated README to reflect change in dependencies
- sha1 digest must be converted to base36 for db, added this
- added missing files to make dist

Change-Id: I0a2db652602c34f0c901b4ec80b4dff507f845ba