replace `./lib/utils/sha.js` with `sha`

closes #3381

see https://github.com/ForbesLindesay/sha for the `sha` module.  It has the same api as `./lib/utils/sha.js` had except that it allows you to optionally pass in the algorithm (so that it can be more useful outside of npm).