prepare() function, SHA-256 hashes, quote URL

In accordance with the new PKGBUILD guidelines for makepkg 4.1, the patches
should be moved to a prepare() function; I would personally prefer it if the
hashes were sha256 rather than md5, and the source URL should be quoted so
that the variables are ensured to expand correctly